Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 13:58:50.092 00:00:00.000 UDP 28.104.0.1:53492 -> 198.28.0.2:53 1 64 1 2025-10-24 13:58:50.092 00:00:00.000 UDP 28.104.0.1:41705 -> 198.28.0.2:53 1 64 1 2025-10-24 13:53:55.958 00:06:00.024 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 13:59:50.383 00:00:00.000 UDP 28.104.0.1:37846 -> 198.28.0.2:53 1 64 1 2025-10-24 13:59:50.383 00:00:00.000 UDP 28.104.0.1:38804 -> 198.28.0.2:53 1 64 1 2025-10-24 13:59:50.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37846 1 109 1 2025-10-24 13:59:50.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38804 1 80 1 2025-10-24 13:56:34.754 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-24 14:00:50.696 00:00:00.000 UDP 28.104.0.1:58443 -> 198.28.0.2:53 1 64 1 2025-10-24 14:00:50.696 00:00:00.000 UDP 28.104.0.1:41840 -> 198.28.0.2:53 1 64 1 2025-10-24 14:00:50.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41840 1 109 1 2025-10-24 14:00:50.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58443 1 80 1 2025-10-24 13:56:46.929 00:05:09.106 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 14:01:51.022 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47135 1 109 1 2025-10-24 14:01:51.019 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32800 1 80 1 2025-10-24 14:01:51.009 00:00:00.000 UDP 28.104.0.1:32800 -> 198.28.0.2:53 1 64 1 2025-10-24 14:01:51.009 00:00:00.000 UDP 28.104.0.1:47135 -> 198.28.0.2:53 1 64 1 2025-10-24 13:56:55.877 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 14:02:19.265 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:02:51.368 00:00:00.000 UDP 28.104.0.1:55364 -> 198.28.0.2:53 1 64 1 2025-10-24 14:02:51.368 00:00:00.000 UDP 28.104.0.1:56799 -> 198.28.0.2:53 1 64 1 2025-10-24 14:02:51.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55364 1 109 1 2025-10-24 14:02:51.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56799 1 80 1 2025-10-24 13:58:55.959 00:05:50.982 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 14:03:51.619 00:00:00.000 UDP 28.104.0.1:52024 -> 198.28.0.2:53 1 64 1 2025-10-24 14:03:51.618 00:00:00.000 UDP 28.104.0.1:59384 -> 198.28.0.2:53 1 64 1 2025-10-24 14:03:51.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52024 1 109 1 2025-10-24 14:03:51.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59384 1 80 1 2025-10-24 13:59:55.969 00:05:50.962 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 14:04:51.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48001 1 80 1 2025-10-24 14:04:51.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43691 1 109 1 2025-10-24 13:59:55.986 00:05:50.995 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 14:04:51.913 00:00:00.000 UDP 28.104.0.1:43691 -> 198.28.0.2:53 1 64 1 2025-10-24 14:04:51.913 00:00:00.000 UDP 28.104.0.1:48001 -> 198.28.0.2:53 1 64 1 2025-10-24 14:05:52.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56709 1 109 1 2025-10-24 14:05:52.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58256 1 80 1 2025-10-24 14:05:52.234 00:00:00.000 UDP 28.104.0.1:56709 -> 198.28.0.2:53 1 64 1 2025-10-24 14:05:52.234 00:00:00.000 UDP 28.104.0.1:58256 -> 198.28.0.2:53 1 64 1 2025-10-24 14:00:55.960 00:06:00.024 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 14:01:54.762 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2576 1 2025-10-24 14:06:52.522 00:00:00.000 UDP 28.104.0.1:41343 -> 198.28.0.2:53 1 64 1 2025-10-24 14:06:52.522 00:00:00.000 UDP 28.104.0.1:45412 -> 198.28.0.2:53 1 64 1 2025-10-24 14:06:52.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45412 1 80 1 2025-10-24 14:06:52.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41343 1 109 1 2025-10-24 14:02:46.931 00:05:09.066 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 14:07:19.314 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:07:52.816 00:00:00.000 UDP 28.104.0.1:40604 -> 198.28.0.2:53 1 64 1 2025-10-24 14:07:52.816 00:00:00.000 UDP 28.104.0.1:40412 -> 198.28.0.2:53 1 64 1 2025-10-24 14:07:52.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40604 1 80 1 2025-10-24 14:07:52.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40412 1 109 1 2025-10-24 14:08:53.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60355 1 80 1 2025-10-24 14:08:53.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39820 1 109 1 2025-10-24 14:08:53.072 00:00:00.000 UDP 28.104.0.1:60355 -> 198.28.0.2:53 1 64 1 2025-10-24 14:08:53.072 00:00:00.000 UDP 28.104.0.1:39820 -> 198.28.0.2:53 1 64 1 2025-10-24 14:03:55.877 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 14:09:53.339 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45328 1 80 1 2025-10-24 14:09:53.339 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32888 1 109 1 2025-10-24 14:04:55.959 00:05:50.982 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 14:09:53.327 00:00:00.000 UDP 28.104.0.1:45328 -> 198.28.0.2:53 1 64 1 2025-10-24 14:09:53.327 00:00:00.000 UDP 28.104.0.1:32888 -> 198.28.0.2:53 1 64 1 2025-10-24 14:05:55.969 00:05:50.962 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 14:10:53.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42802 1 109 1 2025-10-24 14:10:53.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48690 1 80 1 2025-10-24 14:05:55.987 00:05:50.994 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 14:10:53.629 00:00:00.000 UDP 28.104.0.1:42802 -> 198.28.0.2:53 1 64 1 2025-10-24 14:10:53.629 00:00:00.000 UDP 28.104.0.1:48690 -> 198.28.0.2:53 1 64 1 2025-10-24 14:07:14.767 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2836 1 2025-10-24 14:11:53.920 00:00:00.000 UDP 28.104.0.1:47545 -> 198.28.0.2:53 1 64 1 2025-10-24 14:11:53.920 00:00:00.000 UDP 28.104.0.1:50390 -> 198.28.0.2:53 1 64 1 2025-10-24 14:11:53.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47545 1 109 1 2025-10-24 14:11:53.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50390 1 80 1 2025-10-24 14:12:19.390 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:07:55.960 00:06:00.025 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 14:12:54.241 00:00:00.000 UDP 28.104.0.1:44214 -> 198.28.0.2:53 1 64 1 2025-10-24 14:12:54.241 00:00:00.000 UDP 28.104.0.1:44163 -> 198.28.0.2:53 1 64 1 2025-10-24 14:12:54.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44214 1 80 1 2025-10-24 14:08:46.931 00:05:09.069 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 14:12:54.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44163 1 109 1 2025-10-24 14:13:54.487 00:00:00.000 UDP 28.104.0.1:38499 -> 198.28.0.2:53 1 64 1 2025-10-24 14:13:54.486 00:00:00.000 UDP 28.104.0.1:55362 -> 198.28.0.2:53 1 64 1 2025-10-24 14:13:54.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38499 1 109 1 2025-10-24 14:13:54.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55362 1 80 1 2025-10-24 14:14:54.777 00:00:00.000 UDP 28.104.0.1:54277 -> 198.28.0.2:53 1 64 1 2025-10-24 14:14:54.777 00:00:00.000 UDP 28.104.0.1:44187 -> 198.28.0.2:53 1 64 1 2025-10-24 14:14:54.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54277 1 109 1 2025-10-24 14:14:54.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44187 1 80 1 2025-10-24 14:10:55.960 00:05:50.982 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 14:15:55.085 00:00:00.000 UDP 28.104.0.1:40367 -> 198.28.0.2:53 1 64 1 2025-10-24 14:10:55.880 00:06:00.090 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 14:15:55.085 00:00:00.000 UDP 28.104.0.1:52621 -> 198.28.0.2:53 1 64 1 2025-10-24 14:15:55.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52621 1 109 1 2025-10-24 14:15:55.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40367 1 80 1 2025-10-24 14:11:55.971 00:05:50.961 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 14:11:55.988 00:05:50.994 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 14:12:34.773 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-24 14:16:55.399 00:00:00.000 UDP 28.104.0.1:47255 -> 198.28.0.2:53 1 64 1 2025-10-24 14:16:55.399 00:00:00.000 UDP 28.104.0.1:45950 -> 198.28.0.2:53 1 64 1 2025-10-24 14:16:55.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45950 1 80 1 2025-10-24 14:16:55.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47255 1 109 1 2025-10-24 14:17:19.460 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:17:55.689 00:00:00.000 UDP 28.104.0.1:39842 -> 198.28.0.2:53 1 64 1 2025-10-24 14:17:55.689 00:00:00.000 UDP 28.104.0.1:47625 -> 198.28.0.2:53 1 64 1 2025-10-24 14:17:55.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39842 1 80 1 2025-10-24 14:17:55.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47625 1 109 1 2025-10-24 14:14:46.931 00:05:09.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 14:18:55.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51634 1 109 1 2025-10-24 14:18:55.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43492 1 80 1 2025-10-24 14:18:55.983 00:00:00.000 UDP 28.104.0.1:51634 -> 198.28.0.2:53 1 64 1 2025-10-24 14:18:55.983 00:00:00.000 UDP 28.104.0.1:43492 -> 198.28.0.2:53 1 64 1 2025-10-24 14:19:56.275 00:00:00.000 UDP 28.104.0.1:39468 -> 198.28.0.2:53 1 64 1 2025-10-24 14:14:55.970 00:06:00.018 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 14:19:56.275 00:00:00.000 UDP 28.104.0.1:52953 -> 198.28.0.2:53 1 64 1 2025-10-24 14:19:56.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52953 1 109 1 2025-10-24 14:19:56.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39468 1 80 1 2025-10-24 14:20:56.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39119 1 80 1 2025-10-24 14:20:56.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55859 1 109 1 2025-10-24 14:20:56.570 00:00:00.000 UDP 28.104.0.1:39119 -> 198.28.0.2:53 1 64 1 2025-10-24 14:20:56.570 00:00:00.000 UDP 28.104.0.1:55859 -> 198.28.0.2:53 1 64 1 2025-10-24 14:16:55.970 00:05:50.974 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 14:21:56.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35193 1 80 1 2025-10-24 14:21:56.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55348 1 109 1 2025-10-24 14:21:56.828 00:00:00.000 UDP 28.104.0.1:55348 -> 198.28.0.2:53 1 64 1 2025-10-24 14:21:56.828 00:00:00.000 UDP 28.104.0.1:35193 -> 198.28.0.2:53 1 64 1 2025-10-24 14:17:54.778 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2596 1 2025-10-24 14:22:19.403 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:17:55.981 00:05:50.953 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 14:17:55.992 00:05:50.993 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 14:22:57.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42715 1 109 1 2025-10-24 14:22:57.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55398 1 80 1 2025-10-24 14:22:57.127 00:00:00.000 UDP 28.104.0.1:42715 -> 198.28.0.2:53 1 64 1 2025-10-24 14:17:55.882 00:06:00.091 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 14:22:57.127 00:00:00.000 UDP 28.104.0.1:55398 -> 198.28.0.2:53 1 64 1 2025-10-24 14:23:57.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42623 1 109 1 2025-10-24 14:23:57.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34545 1 80 1 2025-10-24 14:23:57.416 00:00:00.000 UDP 28.104.0.1:34545 -> 198.28.0.2:53 1 64 1 2025-10-24 14:23:57.416 00:00:00.000 UDP 28.104.0.1:42623 -> 198.28.0.2:53 1 64 1 2025-10-24 14:24:57.707 00:00:00.000 UDP 28.104.0.1:41026 -> 198.28.0.2:53 1 64 1 2025-10-24 14:24:57.707 00:00:00.000 UDP 28.104.0.1:56483 -> 198.28.0.2:53 1 64 1 2025-10-24 14:24:57.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41026 1 80 1 2025-10-24 14:24:57.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56483 1 109 1 2025-10-24 14:20:46.934 00:05:09.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 14:25:57.995 00:00:00.000 UDP 28.104.0.1:50821 -> 198.28.0.2:53 1 64 1 2025-10-24 14:25:57.995 00:00:00.000 UDP 28.104.0.1:48447 -> 198.28.0.2:53 1 64 1 2025-10-24 14:25:58.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48447 1 109 1 2025-10-24 14:25:58.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50821 1 80 1 2025-10-24 14:26:58.308 00:00:00.000 UDP 28.104.0.1:53489 -> 198.28.0.2:53 1 64 1 2025-10-24 14:26:58.308 00:00:00.000 UDP 28.104.0.1:42344 -> 198.28.0.2:53 1 64 1 2025-10-24 14:21:55.971 00:06:00.018 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 14:26:58.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53489 1 109 1 2025-10-24 14:26:58.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42344 1 80 1 2025-10-24 14:27:19.715 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:23:14.781 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2704 1 2025-10-24 14:22:55.971 00:05:50.973 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 14:27:58.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34035 1 109 1 2025-10-24 14:27:58.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54605 1 80 1 2025-10-24 14:27:58.571 00:00:00.000 UDP 28.104.0.1:34035 -> 198.28.0.2:53 1 64 1 2025-10-24 14:27:58.571 00:00:00.000 UDP 28.104.0.1:54605 -> 198.28.0.2:53 1 64 1 2025-10-24 14:23:55.992 00:05:50.992 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 14:23:55.982 00:05:50.952 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 14:28:58.872 00:00:00.000 UDP 28.104.0.1:33802 -> 198.28.0.2:53 1 64 1 2025-10-24 14:28:58.872 00:00:00.000 UDP 28.104.0.1:49719 -> 198.28.0.2:53 1 64 1 2025-10-24 14:28:58.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33802 1 109 1 2025-10-24 14:28:58.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49719 1 80 1 2025-10-24 14:24:55.883 00:06:00.090 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 14:29:59.184 00:00:00.000 UDP 28.104.0.1:36611 -> 198.28.0.2:53 1 64 1 2025-10-24 14:29:59.184 00:00:00.000 UDP 28.104.0.1:35657 -> 198.28.0.2:53 1 64 1 2025-10-24 14:29:59.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35657 1 80 1 2025-10-24 14:29:59.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36611 1 109 1 2025-10-24 14:26:46.934 00:05:09.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 14:30:59.770 00:00:00.000 UDP 28.104.0.1:42238 -> 198.28.0.2:53 1 64 1 2025-10-24 14:30:59.770 00:00:00.000 UDP 28.104.0.1:36841 -> 198.28.0.2:53 1 64 1 2025-10-24 14:30:59.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42238 1 109 1 2025-10-24 14:30:59.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36841 1 80 1 2025-10-24 14:32:00.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46634 1 109 1 2025-10-24 14:32:00.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46870 1 80 1 2025-10-24 14:32:00.071 00:00:00.000 UDP 28.104.0.1:46634 -> 198.28.0.2:53 1 64 1 2025-10-24 14:32:00.070 00:00:00.000 UDP 28.104.0.1:46870 -> 198.28.0.2:53 1 64 1 2025-10-24 14:32:19.901 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:28:34.784 00:05:10.092 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-24 14:33:00.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39871 1 80 1 2025-10-24 14:33:00.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51882 1 109 1 2025-10-24 14:33:00.376 00:00:00.000 UDP 28.104.0.1:39871 -> 198.28.0.2:53 1 64 1 2025-10-24 14:33:00.376 00:00:00.000 UDP 28.104.0.1:51882 -> 198.28.0.2:53 1 64 1 2025-10-24 14:28:55.973 00:05:50.972 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 14:28:55.972 00:06:00.024 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 14:34:00.675 00:00:00.000 UDP 28.104.0.1:45270 -> 198.28.0.2:53 1 64 1 2025-10-24 14:34:00.675 00:00:00.000 UDP 28.104.0.1:41898 -> 198.28.0.2:53 1 64 1 2025-10-24 14:34:00.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45270 1 80 1 2025-10-24 14:34:00.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41898 1 109 1 2025-10-24 14:29:55.982 00:05:50.953 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 14:29:55.994 00:05:50.993 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 14:35:00.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46858 1 109 1 2025-10-24 14:35:00.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54357 1 80 1 2025-10-24 14:35:00.978 00:00:00.000 UDP 28.104.0.1:54357 -> 198.28.0.2:53 1 64 1 2025-10-24 14:35:00.979 00:00:00.000 UDP 28.104.0.1:46858 -> 198.28.0.2:53 1 64 1 2025-10-24 14:36:01.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60080 1 109 1 2025-10-24 14:36:01.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50814 1 80 1 2025-10-24 14:36:01.289 00:00:00.000 UDP 28.104.0.1:60080 -> 198.28.0.2:53 1 64 1 2025-10-24 14:36:01.289 00:00:00.000 UDP 28.104.0.1:50814 -> 198.28.0.2:53 1 64 1 2025-10-24 14:32:46.934 00:05:09.073 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 14:31:55.884 00:06:00.090 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 14:37:01.593 00:00:00.000 UDP 28.104.0.1:33469 -> 198.28.0.2:53 1 64 1 2025-10-24 14:37:01.593 00:00:00.000 UDP 28.104.0.1:53352 -> 198.28.0.2:53 1 64 1 2025-10-24 14:37:01.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33469 1 109 1 2025-10-24 14:37:01.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53352 1 80 1 2025-10-24 14:37:19.785 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:38:01.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39761 1 109 1 2025-10-24 14:38:01.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43656 1 80 1 2025-10-24 14:38:01.854 00:00:00.000 UDP 28.104.0.1:43656 -> 198.28.0.2:53 1 64 1 2025-10-24 14:38:01.854 00:00:00.000 UDP 28.104.0.1:39761 -> 198.28.0.2:53 1 64 1 2025-10-24 14:33:54.791 00:05:10.051 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2740 1 2025-10-24 14:39:02.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60959 1 80 1 2025-10-24 14:39:02.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38209 1 109 1 2025-10-24 14:39:02.186 00:00:00.000 UDP 28.104.0.1:38209 -> 198.28.0.2:53 1 64 1 2025-10-24 14:39:02.186 00:00:00.000 UDP 28.104.0.1:60959 -> 198.28.0.2:53 1 64 1 2025-10-24 14:34:55.974 00:05:50.972 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 14:40:02.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41410 1 109 1 2025-10-24 14:40:02.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52757 1 80 1 2025-10-24 14:40:02.487 00:00:00.000 UDP 28.104.0.1:52757 -> 198.28.0.2:53 1 64 1 2025-10-24 14:40:02.487 00:00:00.000 UDP 28.104.0.1:41410 -> 198.28.0.2:53 1 64 1 2025-10-24 14:35:55.985 00:05:50.952 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 14:35:55.997 00:05:50.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 14:35:55.974 00:06:00.024 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 14:41:02.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46827 1 80 1 2025-10-24 14:41:02.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58569 1 109 1 2025-10-24 14:41:02.789 00:00:00.000 UDP 28.104.0.1:46827 -> 198.28.0.2:53 1 64 1 2025-10-24 14:41:02.789 00:00:00.000 UDP 28.104.0.1:58569 -> 198.28.0.2:53 1 64 1 2025-10-24 14:42:03.095 00:00:00.000 UDP 28.104.0.1:44817 -> 198.28.0.2:53 1 64 1 2025-10-24 14:42:03.095 00:00:00.000 UDP 28.104.0.1:58833 -> 198.28.0.2:53 1 64 1 2025-10-24 14:42:03.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44817 1 80 1 2025-10-24 14:42:03.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58833 1 109 1 2025-10-24 14:42:19.967 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:38:46.936 00:05:09.073 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 14:43:03.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46158 1 109 1 2025-10-24 14:43:03.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33755 1 80 1 2025-10-24 14:43:03.388 00:00:00.000 UDP 28.104.0.1:33755 -> 198.28.0.2:53 1 64 1 2025-10-24 14:43:03.388 00:00:00.000 UDP 28.104.0.1:46158 -> 198.28.0.2:53 1 64 1 2025-10-24 14:39:14.794 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-10-24 14:44:03.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52897 1 80 1 2025-10-24 14:44:03.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39367 1 109 1 2025-10-24 14:38:55.886 00:06:00.092 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 14:44:03.691 00:00:00.000 UDP 28.104.0.1:52897 -> 198.28.0.2:53 1 64 1 2025-10-24 14:44:03.691 00:00:00.000 UDP 28.104.0.1:39367 -> 198.28.0.2:53 1 64 1 2025-10-24 14:45:03.998 00:00:00.000 UDP 28.104.0.1:35410 -> 198.28.0.2:53 1 64 1 2025-10-24 14:45:03.998 00:00:00.000 UDP 28.104.0.1:54130 -> 198.28.0.2:53 1 64 1 2025-10-24 14:45:04.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54130 1 80 1 2025-10-24 14:45:04.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35410 1 109 1 2025-10-24 14:40:55.976 00:05:50.975 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 14:41:55.997 00:05:00.008 TCP 28.156.0.1:179 -> 28.151.0.1:39145 11 686 1 2025-10-24 14:46:04.266 00:00:00.000 UDP 28.104.0.1:48022 -> 198.28.0.2:53 1 64 1 2025-10-24 14:46:04.266 00:00:00.000 UDP 28.104.0.1:55781 -> 198.28.0.2:53 1 64 1 2025-10-24 14:46:04.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55781 1 109 1 2025-10-24 14:46:04.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48022 1 80 1 2025-10-24 14:41:55.985 00:05:50.956 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 14:47:04.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59419 1 109 1 2025-10-24 14:47:04.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57723 1 80 1 2025-10-24 14:47:04.557 00:00:00.000 UDP 28.104.0.1:59419 -> 198.28.0.2:53 1 64 1 2025-10-24 14:47:04.557 00:00:00.000 UDP 28.104.0.1:57723 -> 198.28.0.2:53 1 64 1 2025-10-24 14:47:19.989 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:42:55.977 00:06:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 14:48:04.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57042 1 80 1 2025-10-24 14:48:04.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37052 1 109 1 2025-10-24 14:48:04.812 00:00:00.000 UDP 28.104.0.1:37052 -> 198.28.0.2:53 1 64 1 2025-10-24 14:48:04.812 00:00:00.000 UDP 28.104.0.1:57042 -> 198.28.0.2:53 1 64 1 2025-10-24 14:44:34.798 00:05:10.092 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2636 1 2025-10-24 14:44:46.941 00:05:09.075 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 14:49:05.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38061 1 80 1 2025-10-24 14:49:05.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41496 1 109 1 2025-10-24 14:49:05.101 00:00:00.000 UDP 28.104.0.1:38061 -> 198.28.0.2:53 1 64 1 2025-10-24 14:49:05.101 00:00:00.000 UDP 28.104.0.1:41496 -> 198.28.0.2:53 1 64 1 2025-10-24 14:50:05.389 00:00:00.000 UDP 28.104.0.1:33359 -> 198.28.0.2:53 1 64 1 2025-10-24 14:50:05.389 00:00:00.000 UDP 28.104.0.1:43496 -> 198.28.0.2:53 1 64 1 2025-10-24 14:50:05.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33359 1 80 1 2025-10-24 14:50:05.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43496 1 109 1 2025-10-24 14:45:55.888 00:06:00.090 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 14:51:05.690 00:00:00.000 UDP 28.104.0.1:41464 -> 198.28.0.2:53 1 64 1 2025-10-24 14:51:05.689 00:00:00.000 UDP 28.104.0.1:51491 -> 198.28.0.2:53 1 64 1 2025-10-24 14:51:05.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51491 1 109 1 2025-10-24 14:51:05.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41464 1 80 1 2025-10-24 14:46:55.977 00:05:50.976 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 14:47:46.991 00:05:09.014 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 14:52:05.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59111 1 80 1 2025-10-24 14:52:05.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50771 1 109 1 2025-10-24 14:52:05.985 00:00:00.000 UDP 28.104.0.1:50771 -> 198.28.0.2:53 1 64 1 2025-10-24 14:52:05.985 00:00:00.000 UDP 28.104.0.1:59111 -> 198.28.0.2:53 1 64 1 2025-10-24 14:52:19.938 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:47:55.989 00:05:50.954 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 14:53:06.292 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52037 1 109 1 2025-10-24 14:53:06.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45620 1 80 1 2025-10-24 14:53:06.282 00:00:00.000 UDP 28.104.0.1:52037 -> 198.28.0.2:53 1 64 1 2025-10-24 14:53:06.281 00:00:00.000 UDP 28.104.0.1:45620 -> 198.28.0.2:53 1 64 1 2025-10-24 14:49:55.978 00:05:00.023 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-24 14:54:06.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53727 1 109 1 2025-10-24 14:54:06.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41722 1 80 1 2025-10-24 14:54:06.593 00:00:00.000 UDP 28.104.0.1:41722 -> 198.28.0.2:53 1 64 1 2025-10-24 14:49:54.808 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2704 1 2025-10-24 14:54:06.595 00:00:00.000 UDP 28.104.0.1:53727 -> 198.28.0.2:53 1 64 1 2025-10-24 14:50:46.942 00:05:09.075 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 14:55:06.859 00:00:00.000 UDP 28.104.0.1:55569 -> 198.28.0.2:53 1 64 1 2025-10-24 14:55:06.859 00:00:00.000 UDP 28.104.0.1:42538 -> 198.28.0.2:53 1 64 1 2025-10-24 14:55:06.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55569 1 80 1 2025-10-24 14:55:06.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42538 1 109 1 2025-10-24 14:56:07.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48898 1 80 1 2025-10-24 14:56:07.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35604 1 109 1 2025-10-24 14:56:07.183 00:00:00.000 UDP 28.104.0.1:35604 -> 198.28.0.2:53 1 64 1 2025-10-24 14:56:07.184 00:00:00.000 UDP 28.104.0.1:48898 -> 198.28.0.2:53 1 64 1 2025-10-24 14:57:07.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37715 1 80 1 2025-10-24 14:57:07.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35881 1 109 1 2025-10-24 14:57:07.487 00:00:00.000 UDP 28.104.0.1:35881 -> 198.28.0.2:53 1 64 1 2025-10-24 14:57:07.487 00:00:00.000 UDP 28.104.0.1:37715 -> 198.28.0.2:53 1 64 1 2025-10-24 14:57:20.163 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 14:52:55.978 00:05:50.977 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 14:52:55.891 00:06:00.091 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 14:53:46.993 00:05:09.014 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 14:58:07.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44967 1 80 1 2025-10-24 14:58:07.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34132 1 109 1 2025-10-24 14:58:07.746 00:00:00.000 UDP 28.104.0.1:44967 -> 198.28.0.2:53 1 64 1 2025-10-24 14:58:07.746 00:00:00.000 UDP 28.104.0.1:34132 -> 198.28.0.2:53 1 64 1 2025-10-24 14:53:55.990 00:05:50.956 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 Summary: total flows: 319, total bytes: 94986, total packets: 1402, avg bps: 192, avg pps: 0, avg bpp: 67 Time window: 2025-10-24 13:53:55 - 2025-10-24 14:59:46 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0043s User: 0.0011s Wall: 0.0025s flows/second: 126535.2 Runtime: 0.0025s