Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 11:59:12.336 00:00:00.000 UDP 28.104.0.1:53032 -> 198.28.0.2:53 1 64 1 2025-10-24 11:59:12.336 00:00:00.000 UDP 28.104.0.1:42218 -> 198.28.0.2:53 1 64 1 2025-10-24 11:59:12.346 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42218 1 109 1 2025-10-24 11:59:12.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53032 1 80 1 2025-10-24 11:54:55.906 00:06:00.037 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 12:00:12.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34495 1 109 1 2025-10-24 12:00:12.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43226 1 80 1 2025-10-24 12:00:12.625 00:00:00.000 UDP 28.104.0.1:43226 -> 198.28.0.2:53 1 64 1 2025-10-24 12:00:12.625 00:00:00.000 UDP 28.104.0.1:34495 -> 198.28.0.2:53 1 64 1 2025-10-24 11:56:46.889 00:05:09.076 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 12:01:12.915 00:00:00.000 UDP 28.104.0.1:38990 -> 198.28.0.2:53 1 64 1 2025-10-24 12:01:12.915 00:00:00.000 UDP 28.104.0.1:39050 -> 198.28.0.2:53 1 64 1 2025-10-24 12:01:12.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39050 1 109 1 2025-10-24 12:01:12.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38990 1 80 1 2025-10-24 12:02:13.219 00:00:00.000 UDP 28.104.0.1:47609 -> 198.28.0.2:53 1 64 1 2025-10-24 12:02:13.219 00:00:00.000 UDP 28.104.0.1:41558 -> 198.28.0.2:53 1 64 1 2025-10-24 12:02:13.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47609 1 109 1 2025-10-24 12:02:13.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41558 1 80 1 2025-10-24 12:02:16.670 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 11:57:55.841 00:06:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 12:03:13.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34277 1 80 1 2025-10-24 12:03:13.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35546 1 109 1 2025-10-24 12:03:13.509 00:00:00.000 UDP 28.104.0.1:34277 -> 198.28.0.2:53 1 64 1 2025-10-24 12:03:13.509 00:00:00.000 UDP 28.104.0.1:35546 -> 198.28.0.2:53 1 64 1 2025-10-24 11:59:14.587 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2784 1 2025-10-24 11:58:55.907 00:05:50.994 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 12:04:14.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57854 1 80 1 2025-10-24 12:04:14.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43738 1 109 1 2025-10-24 12:04:14.268 00:00:00.000 UDP 28.104.0.1:57854 -> 198.28.0.2:53 1 64 1 2025-10-24 12:04:14.268 00:00:00.000 UDP 28.104.0.1:43738 -> 198.28.0.2:53 1 64 1 2025-10-24 11:59:55.917 00:05:50.974 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 11:59:55.955 00:05:50.987 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 12:05:14.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51247 1 80 1 2025-10-24 12:05:14.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50498 1 109 1 2025-10-24 12:05:14.567 00:00:00.000 UDP 28.104.0.1:51247 -> 198.28.0.2:53 1 64 1 2025-10-24 12:05:14.567 00:00:00.000 UDP 28.104.0.1:50498 -> 198.28.0.2:53 1 64 1 2025-10-24 12:06:14.865 00:00:00.000 UDP 28.104.0.1:33791 -> 198.28.0.2:53 1 64 1 2025-10-24 12:06:14.865 00:00:00.000 UDP 28.104.0.1:34779 -> 198.28.0.2:53 1 64 1 2025-10-24 12:06:14.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33791 1 80 1 2025-10-24 12:06:14.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34779 1 109 1 2025-10-24 12:01:55.907 00:06:00.038 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 12:02:46.890 00:05:09.077 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 12:07:15.134 00:00:00.000 UDP 28.104.0.1:43577 -> 198.28.0.2:53 1 64 1 2025-10-24 12:07:15.134 00:00:00.000 UDP 28.104.0.1:56360 -> 198.28.0.2:53 1 64 1 2025-10-24 12:07:16.766 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:07:15.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43577 1 109 1 2025-10-24 12:07:15.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56360 1 80 1 2025-10-24 12:08:15.390 00:00:00.000 UDP 28.104.0.1:46735 -> 198.28.0.2:53 1 64 1 2025-10-24 12:08:15.390 00:00:00.000 UDP 28.104.0.1:59878 -> 198.28.0.2:53 1 64 1 2025-10-24 12:08:15.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59878 1 80 1 2025-10-24 12:08:15.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46735 1 109 1 2025-10-24 12:04:34.594 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-24 12:09:15.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47659 1 80 1 2025-10-24 12:09:15.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38191 1 109 1 2025-10-24 12:09:15.697 00:00:00.000 UDP 28.104.0.1:47659 -> 198.28.0.2:53 1 64 1 2025-10-24 12:09:15.697 00:00:00.000 UDP 28.104.0.1:38191 -> 198.28.0.2:53 1 64 1 2025-10-24 12:04:55.908 00:05:50.998 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 12:04:55.842 00:06:00.068 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 12:10:16.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34717 1 80 1 2025-10-24 12:10:16.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44672 1 109 1 2025-10-24 12:10:16.688 00:00:00.000 UDP 28.104.0.1:34717 -> 198.28.0.2:53 1 64 1 2025-10-24 12:10:16.688 00:00:00.000 UDP 28.104.0.1:44672 -> 198.28.0.2:53 1 64 1 2025-10-24 12:05:55.958 00:05:50.988 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 12:05:55.918 00:05:50.978 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 12:11:16.980 00:00:00.000 UDP 28.104.0.1:38022 -> 198.28.0.2:53 1 64 1 2025-10-24 12:11:16.980 00:00:00.000 UDP 28.104.0.1:37706 -> 198.28.0.2:53 1 64 1 2025-10-24 12:11:16.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37706 1 80 1 2025-10-24 12:11:16.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38022 1 109 1 2025-10-24 12:12:17.068 00:00:00.034 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:12:17.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50019 1 109 1 2025-10-24 12:12:17.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51119 1 80 1 2025-10-24 12:12:17.235 00:00:00.000 UDP 28.104.0.1:51119 -> 198.28.0.2:53 1 64 1 2025-10-24 12:12:17.235 00:00:00.000 UDP 28.104.0.1:50019 -> 198.28.0.2:53 1 64 1 2025-10-24 12:08:46.896 00:05:09.072 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 12:13:17.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53501 1 109 1 2025-10-24 12:13:17.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42784 1 80 1 2025-10-24 12:13:17.489 00:00:00.000 UDP 28.104.0.1:53501 -> 198.28.0.2:53 1 64 1 2025-10-24 12:13:17.489 00:00:00.000 UDP 28.104.0.1:42784 -> 198.28.0.2:53 1 64 1 2025-10-24 12:08:55.908 00:06:00.038 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 12:09:54.601 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2632 1 2025-10-24 12:14:17.745 00:00:00.000 UDP 28.104.0.1:59038 -> 198.28.0.2:53 1 64 1 2025-10-24 12:14:17.746 00:00:00.000 UDP 28.104.0.1:53218 -> 198.28.0.2:53 1 64 1 2025-10-24 12:14:17.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53218 1 109 1 2025-10-24 12:14:17.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59038 1 80 1 2025-10-24 12:15:18.058 00:00:00.000 UDP 28.104.0.1:49118 -> 198.28.0.2:53 1 64 1 2025-10-24 12:15:18.058 00:00:00.000 UDP 28.104.0.1:50323 -> 198.28.0.2:53 1 64 1 2025-10-24 12:15:18.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49118 1 80 1 2025-10-24 12:15:18.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50323 1 109 1 2025-10-24 12:10:55.910 00:05:50.997 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 12:16:18.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40209 1 109 1 2025-10-24 12:16:18.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38523 1 80 1 2025-10-24 12:16:18.317 00:00:00.000 UDP 28.104.0.1:38523 -> 198.28.0.2:53 1 64 1 2025-10-24 12:16:18.318 00:00:00.000 UDP 28.104.0.1:40209 -> 198.28.0.2:53 1 64 1 2025-10-24 12:11:55.921 00:05:50.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 12:11:55.958 00:05:50.990 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 12:11:55.844 00:06:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 12:17:18.615 00:00:00.000 UDP 28.104.0.1:39722 -> 198.28.0.2:53 1 64 1 2025-10-24 12:17:18.616 00:00:00.000 UDP 28.104.0.1:41603 -> 198.28.0.2:53 1 64 1 2025-10-24 12:17:18.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39722 1 80 1 2025-10-24 12:17:17.043 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:17:18.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41603 1 109 1 2025-10-24 12:18:18.873 00:00:00.000 UDP 28.104.0.1:33099 -> 198.28.0.2:53 1 64 1 2025-10-24 12:18:18.873 00:00:00.000 UDP 28.104.0.1:58817 -> 198.28.0.2:53 1 64 1 2025-10-24 12:18:18.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58817 1 80 1 2025-10-24 12:18:18.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33099 1 109 1 2025-10-24 12:14:46.896 00:05:09.074 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 12:19:19.182 00:00:00.000 UDP 28.104.0.1:50634 -> 198.28.0.2:53 1 64 1 2025-10-24 12:19:19.182 00:00:00.000 UDP 28.104.0.1:36565 -> 198.28.0.2:53 1 64 1 2025-10-24 12:19:19.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36565 1 80 1 2025-10-24 12:19:19.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50634 1 109 1 2025-10-24 12:15:14.612 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2596 1 2025-10-24 12:20:19.475 00:00:00.000 UDP 28.104.0.1:43522 -> 198.28.0.2:53 1 64 1 2025-10-24 12:20:19.475 00:00:00.000 UDP 28.104.0.1:44307 -> 198.28.0.2:53 1 64 1 2025-10-24 12:20:19.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43522 1 80 1 2025-10-24 12:20:19.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44307 1 109 1 2025-10-24 12:15:55.910 00:06:00.040 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 12:21:19.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38151 1 80 1 2025-10-24 12:21:19.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40978 1 109 1 2025-10-24 12:21:19.770 00:00:00.000 UDP 28.104.0.1:40978 -> 198.28.0.2:53 1 64 1 2025-10-24 12:21:19.770 00:00:00.000 UDP 28.104.0.1:38151 -> 198.28.0.2:53 1 64 1 2025-10-24 12:16:55.911 00:05:50.998 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 12:22:20.077 00:00:00.000 UDP 28.104.0.1:35701 -> 198.28.0.2:53 1 64 1 2025-10-24 12:22:20.077 00:00:00.000 UDP 28.104.0.1:46027 -> 198.28.0.2:53 1 64 1 2025-10-24 12:22:17.411 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:22:20.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46027 1 109 1 2025-10-24 12:22:20.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35701 1 80 1 2025-10-24 12:17:55.960 00:05:50.989 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 12:17:55.922 00:05:50.978 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 12:23:20.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39603 1 80 1 2025-10-24 12:23:20.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41181 1 109 1 2025-10-24 12:23:20.376 00:00:00.000 UDP 28.104.0.1:39603 -> 198.28.0.2:53 1 64 1 2025-10-24 12:23:20.376 00:00:00.000 UDP 28.104.0.1:41181 -> 198.28.0.2:53 1 64 1 2025-10-24 12:18:55.847 00:06:00.070 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 12:24:20.676 00:00:00.000 UDP 28.104.0.1:54209 -> 198.28.0.2:53 1 64 1 2025-10-24 12:24:20.676 00:00:00.000 UDP 28.104.0.1:36184 -> 198.28.0.2:53 1 64 1 2025-10-24 12:24:20.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36184 1 80 1 2025-10-24 12:24:20.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54209 1 109 1 2025-10-24 12:20:34.619 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-24 12:20:46.899 00:05:09.074 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 12:25:20.937 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51239 1 109 1 2025-10-24 12:25:20.937 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59018 1 80 1 2025-10-24 12:25:20.928 00:00:00.000 UDP 28.104.0.1:59018 -> 198.28.0.2:53 1 64 1 2025-10-24 12:25:20.928 00:00:00.000 UDP 28.104.0.1:51239 -> 198.28.0.2:53 1 64 1 2025-10-24 12:26:21.253 00:00:00.000 UDP 28.104.0.1:60304 -> 198.28.0.2:53 1 64 1 2025-10-24 12:26:21.253 00:00:00.000 UDP 28.104.0.1:34054 -> 198.28.0.2:53 1 64 1 2025-10-24 12:26:21.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34054 1 109 1 2025-10-24 12:26:21.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60304 1 80 1 2025-10-24 12:27:17.047 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:27:21.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42029 1 109 1 2025-10-24 12:27:21.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52632 1 80 1 2025-10-24 12:27:21.552 00:00:00.000 UDP 28.104.0.1:42029 -> 198.28.0.2:53 1 64 1 2025-10-24 12:27:21.552 00:00:00.000 UDP 28.104.0.1:52632 -> 198.28.0.2:53 1 64 1 2025-10-24 12:22:55.915 00:05:50.995 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 12:22:55.915 00:06:00.037 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 12:28:21.844 00:00:00.000 UDP 28.104.0.1:58627 -> 198.28.0.2:53 1 64 1 2025-10-24 12:28:21.844 00:00:00.000 UDP 28.104.0.1:48986 -> 198.28.0.2:53 1 64 1 2025-10-24 12:28:21.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58627 1 80 1 2025-10-24 12:28:21.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48986 1 109 1 2025-10-24 12:23:55.960 00:05:50.992 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 12:23:55.926 00:05:50.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 12:29:22.141 00:00:00.000 UDP 28.104.0.1:37043 -> 198.28.0.2:53 1 64 1 2025-10-24 12:29:22.141 00:00:00.000 UDP 28.104.0.1:50048 -> 198.28.0.2:53 1 64 1 2025-10-24 12:29:22.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50048 1 109 1 2025-10-24 12:29:22.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37043 1 80 1 2025-10-24 12:25:54.631 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2884 1 2025-10-24 12:30:22.435 00:00:00.000 UDP 28.104.0.1:50446 -> 198.28.0.2:53 1 64 1 2025-10-24 12:30:22.434 00:00:00.000 UDP 28.104.0.1:48458 -> 198.28.0.2:53 1 64 1 2025-10-24 12:30:22.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48458 1 109 1 2025-10-24 12:30:22.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50446 1 80 1 2025-10-24 12:25:55.850 00:06:00.070 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 12:26:46.901 00:05:09.074 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 12:31:22.753 00:00:00.000 UDP 28.104.0.1:51222 -> 198.28.0.2:53 1 64 1 2025-10-24 12:31:22.753 00:00:00.000 UDP 28.104.0.1:44805 -> 198.28.0.2:53 1 64 1 2025-10-24 12:31:22.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51222 1 80 1 2025-10-24 12:31:22.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44805 1 109 1 2025-10-24 12:32:17.405 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:32:23.062 00:00:00.000 UDP 28.104.0.1:32928 -> 198.28.0.2:53 1 64 1 2025-10-24 12:32:23.062 00:00:00.000 UDP 28.104.0.1:36180 -> 198.28.0.2:53 1 64 1 2025-10-24 12:32:23.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36180 1 109 1 2025-10-24 12:32:23.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32928 1 80 1 2025-10-24 12:33:23.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49410 1 109 1 2025-10-24 12:33:23.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50172 1 80 1 2025-10-24 12:33:23.979 00:00:00.000 UDP 28.104.0.1:50172 -> 198.28.0.2:53 1 64 1 2025-10-24 12:33:23.979 00:00:00.000 UDP 28.104.0.1:49410 -> 198.28.0.2:53 1 64 1 2025-10-24 12:28:55.919 00:05:50.996 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 12:34:24.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57934 1 109 1 2025-10-24 12:34:24.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49589 1 80 1 2025-10-24 12:34:24.239 00:00:00.000 UDP 28.104.0.1:49589 -> 198.28.0.2:53 1 64 1 2025-10-24 12:34:24.239 00:00:00.000 UDP 28.104.0.1:57934 -> 198.28.0.2:53 1 64 1 2025-10-24 12:29:55.963 00:05:50.992 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 12:29:55.928 00:05:50.978 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 12:29:55.918 00:06:00.036 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 12:31:14.642 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-24 12:35:24.531 00:00:00.000 UDP 28.104.0.1:36103 -> 198.28.0.2:53 1 64 1 2025-10-24 12:35:24.531 00:00:00.000 UDP 28.104.0.1:54039 -> 198.28.0.2:53 1 64 1 2025-10-24 12:35:24.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54039 1 109 1 2025-10-24 12:35:24.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36103 1 80 1 2025-10-24 12:36:24.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54939 1 80 1 2025-10-24 12:36:24.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34594 1 109 1 2025-10-24 12:36:24.855 00:00:00.000 UDP 28.104.0.1:34594 -> 198.28.0.2:53 1 64 1 2025-10-24 12:36:24.855 00:00:00.000 UDP 28.104.0.1:54939 -> 198.28.0.2:53 1 64 1 2025-10-24 12:32:46.902 00:05:09.073 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 12:37:18.560 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:37:25.919 00:00:00.000 UDP 28.104.0.1:58446 -> 198.28.0.2:53 1 64 1 2025-10-24 12:37:25.919 00:00:00.000 UDP 28.104.0.1:49326 -> 198.28.0.2:53 1 64 1 2025-10-24 12:37:25.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49326 1 80 1 2025-10-24 12:37:25.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58446 1 109 1 2025-10-24 12:32:55.851 00:06:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 12:38:26.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51883 1 80 1 2025-10-24 12:38:26.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60387 1 109 1 2025-10-24 12:38:26.249 00:00:00.000 UDP 28.104.0.1:51883 -> 198.28.0.2:53 1 64 1 2025-10-24 12:38:26.249 00:00:00.000 UDP 28.104.0.1:60387 -> 198.28.0.2:53 1 64 1 2025-10-24 12:39:26.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46887 1 109 1 2025-10-24 12:39:26.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41797 1 80 1 2025-10-24 12:39:26.542 00:00:00.000 UDP 28.104.0.1:41797 -> 198.28.0.2:53 1 64 1 2025-10-24 12:39:26.542 00:00:00.000 UDP 28.104.0.1:46887 -> 198.28.0.2:53 1 64 1 2025-10-24 12:34:55.921 00:05:50.997 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 12:40:26.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37155 1 109 1 2025-10-24 12:40:26.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58558 1 80 1 2025-10-24 12:40:26.836 00:00:00.000 UDP 28.104.0.1:37155 -> 198.28.0.2:53 1 64 1 2025-10-24 12:40:26.836 00:00:00.000 UDP 28.104.0.1:58558 -> 198.28.0.2:53 1 64 1 2025-10-24 12:35:55.975 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 12:36:34.655 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2576 1 2025-10-24 12:35:55.931 00:05:50.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 12:41:27.121 00:00:00.000 UDP 28.104.0.1:60753 -> 198.28.0.2:53 1 64 1 2025-10-24 12:41:27.121 00:00:00.000 UDP 28.104.0.1:39843 -> 198.28.0.2:53 1 64 1 2025-10-24 12:41:27.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60753 1 109 1 2025-10-24 12:41:27.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39843 1 80 1 2025-10-24 12:36:55.922 00:06:00.033 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 12:42:17.479 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:42:27.365 00:00:00.000 UDP 28.104.0.1:46205 -> 198.28.0.2:53 1 64 1 2025-10-24 12:42:27.365 00:00:00.000 UDP 28.104.0.1:59352 -> 198.28.0.2:53 1 64 1 2025-10-24 12:42:27.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46205 1 109 1 2025-10-24 12:42:27.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59352 1 80 1 2025-10-24 12:38:46.908 00:05:09.068 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 12:43:27.654 00:00:00.000 UDP 28.104.0.1:39033 -> 198.28.0.2:53 1 64 1 2025-10-24 12:43:27.654 00:00:00.000 UDP 28.104.0.1:49075 -> 198.28.0.2:53 1 64 1 2025-10-24 12:43:27.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39033 1 109 1 2025-10-24 12:43:27.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49075 1 80 1 2025-10-24 12:44:27.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55172 1 80 1 2025-10-24 12:44:27.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37855 1 109 1 2025-10-24 12:44:27.952 00:00:00.000 UDP 28.104.0.1:55172 -> 198.28.0.2:53 1 64 1 2025-10-24 12:44:27.951 00:00:00.000 UDP 28.104.0.1:37855 -> 198.28.0.2:53 1 64 1 2025-10-24 12:39:55.855 00:06:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 12:45:28.244 00:00:00.000 UDP 28.104.0.1:39332 -> 198.28.0.2:53 1 64 1 2025-10-24 12:45:28.244 00:00:00.000 UDP 28.104.0.1:33955 -> 198.28.0.2:53 1 64 1 2025-10-24 12:45:28.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33955 1 80 1 2025-10-24 12:45:28.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39332 1 109 1 2025-10-24 12:40:55.923 00:05:50.996 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 12:41:54.663 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2900 1 2025-10-24 12:46:28.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53842 1 80 1 2025-10-24 12:46:28.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54126 1 109 1 2025-10-24 12:46:28.538 00:00:00.000 UDP 28.104.0.1:54126 -> 198.28.0.2:53 1 64 1 2025-10-24 12:46:28.538 00:00:00.000 UDP 28.104.0.1:53842 -> 198.28.0.2:53 1 64 1 2025-10-24 12:41:55.933 00:05:50.976 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 12:41:55.965 00:05:50.994 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 12:47:17.645 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:47:28.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43127 1 80 1 2025-10-24 12:47:28.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60312 1 109 1 2025-10-24 12:47:28.831 00:00:00.000 UDP 28.104.0.1:60312 -> 198.28.0.2:53 1 64 1 2025-10-24 12:47:28.831 00:00:00.000 UDP 28.104.0.1:43127 -> 198.28.0.2:53 1 64 1 2025-10-24 12:48:29.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56024 1 80 1 2025-10-24 12:48:29.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45837 1 109 1 2025-10-24 12:48:29.126 00:00:00.000 UDP 28.104.0.1:56024 -> 198.28.0.2:53 1 64 1 2025-10-24 12:48:29.126 00:00:00.000 UDP 28.104.0.1:45837 -> 198.28.0.2:53 1 64 1 2025-10-24 12:43:55.924 00:06:00.034 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 12:44:46.909 00:05:09.069 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 12:49:29.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57458 1 109 1 2025-10-24 12:49:29.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50307 1 80 1 2025-10-24 12:49:29.419 00:00:00.000 UDP 28.104.0.1:57458 -> 198.28.0.2:53 1 64 1 2025-10-24 12:49:29.419 00:00:00.000 UDP 28.104.0.1:50307 -> 198.28.0.2:53 1 64 1 2025-10-24 12:50:29.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44949 1 80 1 2025-10-24 12:50:29.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51362 1 109 1 2025-10-24 12:50:29.714 00:00:00.000 UDP 28.104.0.1:44949 -> 198.28.0.2:53 1 64 1 2025-10-24 12:50:29.714 00:00:00.000 UDP 28.104.0.1:51362 -> 198.28.0.2:53 1 64 1 2025-10-24 12:47:14.670 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-10-24 12:51:29.971 00:00:00.000 UDP 28.104.0.1:49080 -> 198.28.0.2:53 1 64 1 2025-10-24 12:51:29.971 00:00:00.000 UDP 28.104.0.1:47951 -> 198.28.0.2:53 1 64 1 2025-10-24 12:51:29.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47951 1 80 1 2025-10-24 12:51:29.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49080 1 109 1 2025-10-24 12:46:55.925 00:05:50.995 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 12:46:55.855 00:06:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 12:52:17.722 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:52:30.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48840 1 109 1 2025-10-24 12:52:30.237 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54441 1 80 1 2025-10-24 12:52:30.226 00:00:00.000 UDP 28.104.0.1:48840 -> 198.28.0.2:53 1 64 1 2025-10-24 12:52:30.226 00:00:00.000 UDP 28.104.0.1:54441 -> 198.28.0.2:53 1 64 1 2025-10-24 12:47:55.936 00:05:50.975 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 12:47:55.967 00:05:50.994 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 12:53:30.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54640 1 80 1 2025-10-24 12:53:30.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59192 1 109 1 2025-10-24 12:53:30.532 00:00:00.000 UDP 28.104.0.1:54640 -> 198.28.0.2:53 1 64 1 2025-10-24 12:53:30.532 00:00:00.000 UDP 28.104.0.1:59192 -> 198.28.0.2:53 1 64 1 2025-10-24 12:54:30.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60517 1 109 1 2025-10-24 12:54:30.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41151 1 80 1 2025-10-24 12:54:30.834 00:00:00.000 UDP 28.104.0.1:60517 -> 198.28.0.2:53 1 64 1 2025-10-24 12:54:30.834 00:00:00.000 UDP 28.104.0.1:41151 -> 198.28.0.2:53 1 64 1 2025-10-24 12:50:46.910 00:05:09.068 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 12:55:31.146 00:00:00.000 UDP 28.104.0.1:34296 -> 198.28.0.2:53 1 64 1 2025-10-24 12:55:31.146 00:00:00.000 UDP 28.104.0.1:40040 -> 198.28.0.2:53 1 64 1 2025-10-24 12:55:31.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40040 1 109 1 2025-10-24 12:55:31.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34296 1 80 1 2025-10-24 12:50:55.926 00:06:00.041 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 12:56:31.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47515 1 80 1 2025-10-24 12:56:31.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36559 1 109 1 2025-10-24 12:56:31.439 00:00:00.000 UDP 28.104.0.1:47515 -> 198.28.0.2:53 1 64 1 2025-10-24 12:56:31.438 00:00:00.000 UDP 28.104.0.1:36559 -> 198.28.0.2:53 1 64 1 2025-10-24 12:52:34.673 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2740 1 2025-10-24 12:57:17.752 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 12:57:31.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57432 1 80 1 2025-10-24 12:57:31.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41198 1 109 1 2025-10-24 12:57:31.750 00:00:00.000 UDP 28.104.0.1:57432 -> 198.28.0.2:53 1 64 1 2025-10-24 12:57:31.749 00:00:00.000 UDP 28.104.0.1:41198 -> 198.28.0.2:53 1 64 1 2025-10-24 12:52:55.936 00:05:50.987 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 12:58:32.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54957 1 109 1 2025-10-24 12:58:32.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51143 1 80 1 2025-10-24 12:58:32.010 00:00:00.000 UDP 28.104.0.1:51143 -> 198.28.0.2:53 1 64 1 2025-10-24 12:58:32.011 00:00:00.000 UDP 28.104.0.1:54957 -> 198.28.0.2:53 1 64 1 2025-10-24 12:53:55.967 00:05:50.995 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 12:53:55.947 00:05:50.967 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 Summary: total flows: 320, total bytes: 94513, total packets: 1393, avg bps: 194, avg pps: 0, avg bpp: 67 Time window: 2025-10-24 11:54:55 - 2025-10-24 12:59:46 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0052s User: 0.0021s Wall: 0.0039s flows/second: 82201.0 Runtime: 0.0039s