Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 12:53:55.860 00:06:00.076 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 12:59:32.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34191 1 109 1 2025-10-24 12:59:32.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35907 1 80 1 2025-10-24 12:59:32.304 00:00:00.000 UDP 28.104.0.1:34191 -> 198.28.0.2:53 1 64 1 2025-10-24 12:59:32.303 00:00:00.000 UDP 28.104.0.1:35907 -> 198.28.0.2:53 1 64 1 2025-10-24 13:00:32.625 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48499 1 80 1 2025-10-24 13:00:32.625 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35855 1 109 1 2025-10-24 13:00:32.613 00:00:00.000 UDP 28.104.0.1:35855 -> 198.28.0.2:53 1 64 1 2025-10-24 13:00:32.613 00:00:00.000 UDP 28.104.0.1:48499 -> 198.28.0.2:53 1 64 1 2025-10-24 12:56:46.912 00:05:09.067 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 13:01:32.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51137 1 109 1 2025-10-24 13:01:32.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41346 1 80 1 2025-10-24 13:01:32.907 00:00:00.000 UDP 28.104.0.1:51137 -> 198.28.0.2:53 1 64 1 2025-10-24 13:01:32.907 00:00:00.000 UDP 28.104.0.1:41346 -> 198.28.0.2:53 1 64 1 2025-10-24 12:57:54.683 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2560 1 2025-10-24 13:02:17.910 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:02:33.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50483 1 109 1 2025-10-24 13:02:33.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46601 1 80 1 2025-10-24 13:02:33.210 00:00:00.000 UDP 28.104.0.1:46601 -> 198.28.0.2:53 1 64 1 2025-10-24 13:02:33.210 00:00:00.000 UDP 28.104.0.1:50483 -> 198.28.0.2:53 1 64 1 2025-10-24 12:57:55.937 00:06:00.034 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 13:03:33.472 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48631 1 109 1 2025-10-24 13:03:33.472 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56036 1 80 1 2025-10-24 13:03:33.461 00:00:00.000 UDP 28.104.0.1:56036 -> 198.28.0.2:53 1 64 1 2025-10-24 13:03:33.461 00:00:00.000 UDP 28.104.0.1:48631 -> 198.28.0.2:53 1 64 1 2025-10-24 12:58:55.935 00:05:50.988 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 13:04:33.758 00:00:00.000 UDP 28.104.0.1:42473 -> 198.28.0.2:53 1 64 1 2025-10-24 13:04:33.758 00:00:00.000 UDP 28.104.0.1:53689 -> 198.28.0.2:53 1 64 1 2025-10-24 13:04:33.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53689 1 109 1 2025-10-24 13:04:33.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42473 1 80 1 2025-10-24 12:59:55.945 00:05:50.967 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 12:59:55.969 00:05:50.995 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 13:05:34.079 00:00:00.000 UDP 28.104.0.1:33190 -> 198.28.0.2:53 1 64 1 2025-10-24 13:05:34.079 00:00:00.000 UDP 28.104.0.1:59168 -> 198.28.0.2:53 1 64 1 2025-10-24 13:05:34.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33190 1 109 1 2025-10-24 13:05:34.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59168 1 80 1 2025-10-24 13:00:55.862 00:06:00.078 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 13:06:34.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44323 1 109 1 2025-10-24 13:06:34.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51243 1 80 1 2025-10-24 13:06:34.332 00:00:00.000 UDP 28.104.0.1:51243 -> 198.28.0.2:53 1 64 1 2025-10-24 13:06:34.332 00:00:00.000 UDP 28.104.0.1:44323 -> 198.28.0.2:53 1 64 1 2025-10-24 13:02:46.913 00:05:09.067 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 13:07:18.161 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:03:14.688 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2496 1 2025-10-24 13:07:34.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37420 1 109 1 2025-10-24 13:07:34.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54563 1 80 1 2025-10-24 13:07:34.582 00:00:00.000 UDP 28.104.0.1:37420 -> 198.28.0.2:53 1 64 1 2025-10-24 13:07:34.582 00:00:00.000 UDP 28.104.0.1:54563 -> 198.28.0.2:53 1 64 1 2025-10-24 13:08:34.887 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36263 1 109 1 2025-10-24 13:08:34.887 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35204 1 80 1 2025-10-24 13:08:34.877 00:00:00.000 UDP 28.104.0.1:36263 -> 198.28.0.2:53 1 64 1 2025-10-24 13:08:34.877 00:00:00.000 UDP 28.104.0.1:35204 -> 198.28.0.2:53 1 64 1 2025-10-24 13:09:35.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41419 1 80 1 2025-10-24 13:09:35.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45788 1 109 1 2025-10-24 13:09:35.143 00:00:00.000 UDP 28.104.0.1:45788 -> 198.28.0.2:53 1 64 1 2025-10-24 13:09:35.143 00:00:00.000 UDP 28.104.0.1:41419 -> 198.28.0.2:53 1 64 1 2025-10-24 13:04:55.937 00:05:50.987 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 13:04:55.938 00:06:00.033 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 13:10:35.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40139 1 109 1 2025-10-24 13:10:35.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44299 1 80 1 2025-10-24 13:10:35.429 00:00:00.000 UDP 28.104.0.1:40139 -> 198.28.0.2:53 1 64 1 2025-10-24 13:10:35.429 00:00:00.000 UDP 28.104.0.1:44299 -> 198.28.0.2:53 1 64 1 2025-10-24 13:05:55.970 00:05:50.995 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 13:05:55.949 00:05:50.967 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 13:11:35.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41461 1 109 1 2025-10-24 13:11:35.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52967 1 80 1 2025-10-24 13:11:35.733 00:00:00.000 UDP 28.104.0.1:52967 -> 198.28.0.2:53 1 64 1 2025-10-24 13:11:35.733 00:00:00.000 UDP 28.104.0.1:41461 -> 198.28.0.2:53 1 64 1 2025-10-24 13:12:17.943 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:12:35.985 00:00:00.000 UDP 28.104.0.1:49678 -> 198.28.0.2:53 1 64 1 2025-10-24 13:12:35.985 00:00:00.000 UDP 28.104.0.1:38053 -> 198.28.0.2:53 1 64 1 2025-10-24 13:12:35.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38053 1 109 1 2025-10-24 13:12:35.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49678 1 80 1 2025-10-24 13:08:34.692 00:05:10.039 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2836 1 2025-10-24 13:08:46.915 00:05:09.072 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 13:07:55.861 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 13:13:36.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52173 1 109 1 2025-10-24 13:13:36.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59319 1 80 1 2025-10-24 13:13:36.239 00:00:00.000 UDP 28.104.0.1:59319 -> 198.28.0.2:53 1 64 1 2025-10-24 13:13:36.239 00:00:00.000 UDP 28.104.0.1:52173 -> 198.28.0.2:53 1 64 1 2025-10-24 13:14:36.551 00:00:00.000 UDP 28.104.0.1:52647 -> 198.28.0.2:53 1 64 1 2025-10-24 13:14:36.551 00:00:00.000 UDP 28.104.0.1:58437 -> 198.28.0.2:53 1 64 1 2025-10-24 13:14:36.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52647 1 80 1 2025-10-24 13:14:36.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58437 1 109 1 2025-10-24 13:15:36.857 00:00:00.000 UDP 28.104.0.1:43555 -> 198.28.0.2:53 1 64 1 2025-10-24 13:15:36.857 00:00:00.000 UDP 28.104.0.1:39511 -> 198.28.0.2:53 1 64 1 2025-10-24 13:15:36.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43555 1 109 1 2025-10-24 13:15:36.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39511 1 80 1 2025-10-24 13:10:55.943 00:05:50.985 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 13:16:37.171 00:00:00.000 UDP 28.104.0.1:45000 -> 198.28.0.2:53 1 64 1 2025-10-24 13:16:37.170 00:00:00.000 UDP 28.104.0.1:45239 -> 198.28.0.2:53 1 64 1 2025-10-24 13:16:37.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45000 1 109 1 2025-10-24 13:16:37.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45239 1 80 1 2025-10-24 13:11:55.978 00:05:50.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 13:11:55.953 00:05:50.965 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 13:11:55.943 00:06:00.032 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 13:17:18.430 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:17:37.465 00:00:00.000 UDP 28.104.0.1:36424 -> 198.28.0.2:53 1 64 1 2025-10-24 13:17:37.465 00:00:00.000 UDP 28.104.0.1:54947 -> 198.28.0.2:53 1 64 1 2025-10-24 13:17:37.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36424 1 109 1 2025-10-24 13:17:37.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54947 1 80 1 2025-10-24 13:13:54.694 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-24 13:18:37.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56401 1 80 1 2025-10-24 13:18:37.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52566 1 109 1 2025-10-24 13:18:37.719 00:00:00.000 UDP 28.104.0.1:56401 -> 198.28.0.2:53 1 64 1 2025-10-24 13:18:37.719 00:00:00.000 UDP 28.104.0.1:52566 -> 198.28.0.2:53 1 64 1 2025-10-24 13:14:46.917 00:05:09.072 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 13:19:38.054 00:00:00.000 UDP 28.104.0.1:36268 -> 198.28.0.2:53 1 64 1 2025-10-24 13:19:38.054 00:00:00.000 UDP 28.104.0.1:54276 -> 198.28.0.2:53 1 64 1 2025-10-24 13:19:38.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54276 1 109 1 2025-10-24 13:19:38.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36268 1 80 1 2025-10-24 13:14:55.862 00:06:00.084 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 13:20:38.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53339 1 109 1 2025-10-24 13:20:38.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51713 1 80 1 2025-10-24 13:20:38.373 00:00:00.000 UDP 28.104.0.1:53339 -> 198.28.0.2:53 1 64 1 2025-10-24 13:20:38.373 00:00:00.000 UDP 28.104.0.1:51713 -> 198.28.0.2:53 1 64 1 2025-10-24 13:21:38.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48049 1 109 1 2025-10-24 13:21:38.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37613 1 80 1 2025-10-24 13:21:38.666 00:00:00.000 UDP 28.104.0.1:37613 -> 198.28.0.2:53 1 64 1 2025-10-24 13:21:38.666 00:00:00.000 UDP 28.104.0.1:48049 -> 198.28.0.2:53 1 64 1 2025-10-24 13:16:55.946 00:05:50.983 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 13:22:18.425 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:22:38.964 00:00:00.000 UDP 28.104.0.1:33967 -> 198.28.0.2:53 1 64 1 2025-10-24 13:22:38.964 00:00:00.000 UDP 28.104.0.1:50060 -> 198.28.0.2:53 1 64 1 2025-10-24 13:22:38.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33967 1 80 1 2025-10-24 13:22:38.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50060 1 109 1 2025-10-24 13:17:55.955 00:05:50.963 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 13:17:55.978 00:05:50.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 13:19:14.700 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2636 1 2025-10-24 13:23:39.226 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47670 1 109 1 2025-10-24 13:23:39.225 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44809 1 80 1 2025-10-24 13:23:39.217 00:00:00.000 UDP 28.104.0.1:47670 -> 198.28.0.2:53 1 64 1 2025-10-24 13:23:39.217 00:00:00.000 UDP 28.104.0.1:44809 -> 198.28.0.2:53 1 64 1 2025-10-24 13:18:55.945 00:06:00.029 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 13:24:39.519 00:00:00.000 UDP 28.104.0.1:36730 -> 198.28.0.2:53 1 64 1 2025-10-24 13:24:39.519 00:00:00.000 UDP 28.104.0.1:57909 -> 198.28.0.2:53 1 64 1 2025-10-24 13:24:39.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36730 1 80 1 2025-10-24 13:24:39.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57909 1 109 1 2025-10-24 13:20:46.918 00:05:09.071 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 13:25:39.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38034 1 109 1 2025-10-24 13:25:39.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36912 1 80 1 2025-10-24 13:25:39.824 00:00:00.000 UDP 28.104.0.1:38034 -> 198.28.0.2:53 1 64 1 2025-10-24 13:25:39.824 00:00:00.000 UDP 28.104.0.1:36912 -> 198.28.0.2:53 1 64 1 2025-10-24 13:26:40.128 00:00:00.000 UDP 28.104.0.1:39644 -> 198.28.0.2:53 1 64 1 2025-10-24 13:26:40.128 00:00:00.000 UDP 28.104.0.1:36635 -> 198.28.0.2:53 1 64 1 2025-10-24 13:26:40.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36635 1 80 1 2025-10-24 13:26:40.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39644 1 109 1 2025-10-24 13:21:55.862 00:06:00.088 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 13:27:18.560 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:27:40.382 00:00:00.000 UDP 28.104.0.1:35223 -> 198.28.0.2:53 1 64 1 2025-10-24 13:27:40.382 00:00:00.000 UDP 28.104.0.1:60311 -> 198.28.0.2:53 1 64 1 2025-10-24 13:27:40.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60311 1 109 1 2025-10-24 13:27:40.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35223 1 80 1 2025-10-24 13:22:55.945 00:05:50.984 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 13:28:40.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52987 1 109 1 2025-10-24 13:28:40.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44409 1 80 1 2025-10-24 13:28:40.677 00:00:00.000 UDP 28.104.0.1:44409 -> 198.28.0.2:53 1 64 1 2025-10-24 13:28:40.677 00:00:00.000 UDP 28.104.0.1:52987 -> 198.28.0.2:53 1 64 1 2025-10-24 13:23:55.957 00:05:50.962 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 13:24:34.707 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2784 1 2025-10-24 13:23:55.979 00:05:50.990 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 13:29:40.981 00:00:00.000 UDP 28.104.0.1:35266 -> 198.28.0.2:53 1 64 1 2025-10-24 13:29:40.982 00:00:00.000 UDP 28.104.0.1:50213 -> 198.28.0.2:53 1 64 1 2025-10-24 13:29:40.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50213 1 109 1 2025-10-24 13:29:40.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35266 1 80 1 2025-10-24 13:30:41.234 00:00:00.000 UDP 28.104.0.1:49095 -> 198.28.0.2:53 1 64 1 2025-10-24 13:30:41.233 00:00:00.000 UDP 28.104.0.1:54035 -> 198.28.0.2:53 1 64 1 2025-10-24 13:30:41.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54035 1 109 1 2025-10-24 13:30:41.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49095 1 80 1 2025-10-24 13:25:55.948 00:06:00.029 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 13:26:46.919 00:05:09.071 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 13:31:41.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48114 1 80 1 2025-10-24 13:31:41.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35567 1 109 1 2025-10-24 13:31:41.527 00:00:00.000 UDP 28.104.0.1:48114 -> 198.28.0.2:53 1 64 1 2025-10-24 13:31:41.527 00:00:00.000 UDP 28.104.0.1:35567 -> 198.28.0.2:53 1 64 1 2025-10-24 13:32:18.556 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:32:41.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58995 1 109 1 2025-10-24 13:32:41.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56882 1 80 1 2025-10-24 13:32:41.822 00:00:00.000 UDP 28.104.0.1:58995 -> 198.28.0.2:53 1 64 1 2025-10-24 13:32:41.822 00:00:00.000 UDP 28.104.0.1:56882 -> 198.28.0.2:53 1 64 1 2025-10-24 13:33:42.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60786 1 109 1 2025-10-24 13:33:42.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38799 1 80 1 2025-10-24 13:33:42.113 00:00:00.000 UDP 28.104.0.1:38799 -> 198.28.0.2:53 1 64 1 2025-10-24 13:33:42.113 00:00:00.000 UDP 28.104.0.1:60786 -> 198.28.0.2:53 1 64 1 2025-10-24 13:28:55.950 00:05:50.979 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 13:28:55.865 00:06:00.085 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 13:29:54.716 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-10-24 13:34:42.376 00:00:00.000 UDP 28.104.0.1:52905 -> 198.28.0.2:53 1 64 1 2025-10-24 13:34:42.375 00:00:00.000 UDP 28.104.0.1:47616 -> 198.28.0.2:53 1 64 1 2025-10-24 13:34:42.388 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52905 1 80 1 2025-10-24 13:34:42.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47616 1 109 1 2025-10-24 13:29:55.981 00:05:50.990 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 13:29:55.962 00:05:50.959 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 13:35:42.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46026 1 109 1 2025-10-24 13:35:42.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54432 1 80 1 2025-10-24 13:35:42.634 00:00:00.000 UDP 28.104.0.1:46026 -> 198.28.0.2:53 1 64 1 2025-10-24 13:35:42.634 00:00:00.000 UDP 28.104.0.1:54432 -> 198.28.0.2:53 1 64 1 2025-10-24 13:36:42.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39877 1 80 1 2025-10-24 13:36:42.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58355 1 109 1 2025-10-24 13:36:42.935 00:00:00.000 UDP 28.104.0.1:39877 -> 198.28.0.2:53 1 64 1 2025-10-24 13:36:42.935 00:00:00.000 UDP 28.104.0.1:58355 -> 198.28.0.2:53 1 64 1 2025-10-24 13:32:46.920 00:05:09.071 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 13:37:19.084 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:37:43.676 00:00:00.000 UDP 28.104.0.1:36850 -> 198.28.0.2:53 1 64 1 2025-10-24 13:37:43.676 00:00:00.000 UDP 28.104.0.1:50664 -> 198.28.0.2:53 1 64 1 2025-10-24 13:37:43.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50664 1 109 1 2025-10-24 13:37:43.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36850 1 80 1 2025-10-24 13:32:55.951 00:06:00.027 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 13:38:43.979 00:00:00.000 UDP 28.104.0.1:57469 -> 198.28.0.2:53 1 64 1 2025-10-24 13:38:43.978 00:00:00.000 UDP 28.104.0.1:52127 -> 198.28.0.2:53 1 64 1 2025-10-24 13:38:43.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52127 1 80 1 2025-10-24 13:38:43.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57469 1 109 1 2025-10-24 13:35:14.724 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2680 1 2025-10-24 13:34:55.951 00:05:50.980 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 13:39:44.285 00:00:00.000 UDP 28.104.0.1:56964 -> 198.28.0.2:53 1 64 1 2025-10-24 13:39:44.285 00:00:00.000 UDP 28.104.0.1:35263 -> 198.28.0.2:53 1 64 1 2025-10-24 13:39:44.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35263 1 80 1 2025-10-24 13:39:44.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56964 1 109 1 2025-10-24 13:40:44.581 00:00:00.000 UDP 28.104.0.1:33830 -> 198.28.0.2:53 1 64 1 2025-10-24 13:35:55.979 00:05:50.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 13:40:44.581 00:00:00.000 UDP 28.104.0.1:46198 -> 198.28.0.2:53 1 64 1 2025-10-24 13:40:44.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46198 1 109 1 2025-10-24 13:40:44.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33830 1 80 1 2025-10-24 13:35:55.961 00:05:50.960 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 13:35:55.871 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 13:41:44.925 00:00:00.000 UDP 28.104.0.1:52114 -> 198.28.0.2:53 1 64 1 2025-10-24 13:41:44.925 00:00:00.000 UDP 28.104.0.1:52936 -> 198.28.0.2:53 1 64 1 2025-10-24 13:41:44.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52936 1 80 1 2025-10-24 13:41:44.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52114 1 109 1 2025-10-24 13:42:18.815 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:42:45.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38494 1 109 1 2025-10-24 13:42:45.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52950 1 80 1 2025-10-24 13:42:45.238 00:00:00.000 UDP 28.104.0.1:52950 -> 198.28.0.2:53 1 64 1 2025-10-24 13:42:45.238 00:00:00.000 UDP 28.104.0.1:38494 -> 198.28.0.2:53 1 64 1 2025-10-24 13:38:46.920 00:05:09.073 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 13:43:45.529 00:00:00.000 UDP 28.104.0.1:52328 -> 198.28.0.2:53 1 64 1 2025-10-24 13:43:45.529 00:00:00.000 UDP 28.104.0.1:33659 -> 198.28.0.2:53 1 64 1 2025-10-24 13:43:45.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52328 1 80 1 2025-10-24 13:43:45.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33659 1 109 1 2025-10-24 13:44:45.812 00:00:00.000 UDP 28.104.0.1:41275 -> 198.28.0.2:53 1 64 1 2025-10-24 13:44:45.812 00:00:00.000 UDP 28.104.0.1:42318 -> 198.28.0.2:53 1 64 1 2025-10-24 13:40:34.735 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2596 1 2025-10-24 13:44:45.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41275 1 80 1 2025-10-24 13:44:45.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42318 1 109 1 2025-10-24 13:39:55.953 00:06:00.027 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 13:40:55.953 00:05:50.978 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 13:45:46.100 00:00:00.000 UDP 28.104.0.1:57383 -> 198.28.0.2:53 1 64 1 2025-10-24 13:45:46.100 00:00:00.000 UDP 28.104.0.1:40480 -> 198.28.0.2:53 1 64 1 2025-10-24 13:45:46.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40480 1 109 1 2025-10-24 13:45:46.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57383 1 80 1 2025-10-24 13:46:46.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45461 1 109 1 2025-10-24 13:41:55.964 00:05:50.965 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 13:46:46.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44087 1 80 1 2025-10-24 13:46:46.390 00:00:00.000 UDP 28.104.0.1:45461 -> 198.28.0.2:53 1 64 1 2025-10-24 13:41:55.984 00:05:50.996 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 13:46:46.390 00:00:00.000 UDP 28.104.0.1:44087 -> 198.28.0.2:53 1 64 1 2025-10-24 13:47:18.680 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:47:46.687 00:00:00.000 UDP 28.104.0.1:56258 -> 198.28.0.2:53 1 64 1 2025-10-24 13:47:46.687 00:00:00.000 UDP 28.104.0.1:60607 -> 198.28.0.2:53 1 64 1 2025-10-24 13:47:46.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60607 1 109 1 2025-10-24 13:47:46.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56258 1 80 1 2025-10-24 13:42:55.875 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 13:48:47.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43542 1 109 1 2025-10-24 13:48:47.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40604 1 80 1 2025-10-24 13:48:46.994 00:00:00.000 UDP 28.104.0.1:40604 -> 198.28.0.2:53 1 64 1 2025-10-24 13:48:46.994 00:00:00.000 UDP 28.104.0.1:43542 -> 198.28.0.2:53 1 64 1 2025-10-24 13:44:46.921 00:05:09.075 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 13:49:47.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56881 1 80 1 2025-10-24 13:49:47.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41123 1 109 1 2025-10-24 13:49:47.288 00:00:00.000 UDP 28.104.0.1:56881 -> 198.28.0.2:53 1 64 1 2025-10-24 13:49:47.288 00:00:00.000 UDP 28.104.0.1:41123 -> 198.28.0.2:53 1 64 1 2025-10-24 13:45:54.741 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-10-24 13:50:47.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59421 1 109 1 2025-10-24 13:50:47.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51184 1 80 1 2025-10-24 13:50:47.540 00:00:00.000 UDP 28.104.0.1:51184 -> 198.28.0.2:53 1 64 1 2025-10-24 13:50:47.539 00:00:00.000 UDP 28.104.0.1:59421 -> 198.28.0.2:53 1 64 1 2025-10-24 13:46:55.959 00:05:50.981 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 13:51:47.829 00:00:00.000 UDP 28.104.0.1:37348 -> 198.28.0.2:53 1 64 1 2025-10-24 13:51:47.829 00:00:00.000 UDP 28.104.0.1:37013 -> 198.28.0.2:53 1 64 1 2025-10-24 13:51:47.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37348 1 109 1 2025-10-24 13:51:47.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37013 1 80 1 2025-10-24 13:46:55.957 00:06:00.024 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 13:52:18.900 00:00:00.035 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:52:48.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41803 1 109 1 2025-10-24 13:47:55.967 00:05:50.962 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 13:52:48.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58878 1 80 1 2025-10-24 13:52:48.116 00:00:00.000 UDP 28.104.0.1:58878 -> 198.28.0.2:53 1 64 1 2025-10-24 13:47:55.983 00:05:50.996 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 13:52:48.116 00:00:00.000 UDP 28.104.0.1:41803 -> 198.28.0.2:53 1 64 1 2025-10-24 13:53:48.411 00:00:00.000 UDP 28.104.0.1:47167 -> 198.28.0.2:53 1 64 1 2025-10-24 13:53:48.411 00:00:00.000 UDP 28.104.0.1:60850 -> 198.28.0.2:53 1 64 1 2025-10-24 13:53:48.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60850 1 109 1 2025-10-24 13:53:48.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47167 1 80 1 2025-10-24 13:54:48.871 00:00:00.000 UDP 28.104.0.1:33969 -> 198.28.0.2:53 1 64 1 2025-10-24 13:54:48.871 00:00:00.000 UDP 28.104.0.1:51964 -> 198.28.0.2:53 1 64 1 2025-10-24 13:54:48.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33969 1 80 1 2025-10-24 13:54:48.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51964 1 109 1 2025-10-24 13:49:55.875 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 13:50:46.930 00:05:09.067 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 13:51:14.745 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2900 1 2025-10-24 13:55:49.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48944 1 80 1 2025-10-24 13:55:49.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53409 1 109 1 2025-10-24 13:55:49.230 00:00:00.000 UDP 28.104.0.1:53409 -> 198.28.0.2:53 1 64 1 2025-10-24 13:55:49.230 00:00:00.000 UDP 28.104.0.1:48944 -> 198.28.0.2:53 1 64 1 2025-10-24 13:56:49.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43291 1 109 1 2025-10-24 13:56:49.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48967 1 80 1 2025-10-24 13:56:49.497 00:00:00.000 UDP 28.104.0.1:48967 -> 198.28.0.2:53 1 64 1 2025-10-24 13:56:49.497 00:00:00.000 UDP 28.104.0.1:43291 -> 198.28.0.2:53 1 64 1 2025-10-24 13:57:18.987 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 13:52:55.957 00:05:50.982 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 13:57:49.786 00:00:00.000 UDP 28.104.0.1:36755 -> 198.28.0.2:53 1 64 1 2025-10-24 13:57:49.786 00:00:00.000 UDP 28.104.0.1:54106 -> 198.28.0.2:53 1 64 1 2025-10-24 13:57:49.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36755 1 80 1 2025-10-24 13:57:49.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54106 1 109 1 2025-10-24 13:53:55.986 00:05:50.994 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 13:53:55.968 00:05:50.962 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 13:58:50.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53492 1 109 1 2025-10-24 13:58:50.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41705 1 80 1 Summary: total flows: 318, total bytes: 94633, total packets: 1393, avg bps: 191, avg pps: 0, avg bpp: 67 Time window: 2025-10-24 12:53:55 - 2025-10-24 13:59:46 Total flows processed: 318, passed: 318, Blocks skipped: 0, Bytes read: 33136 Sys: 0.0058s User: 0.0008s Wall: 0.0040s flows/second: 79501.0 Runtime: 0.0040s