Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 11:57:58.397 00:01:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-10-29 11:57:58.397 00:01:00.026 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 11:59:40.092 00:00:00.000 UDP 28.104.0.1:47414 -> 198.28.0.2:53 1 64 1 2025-10-29 11:59:40.092 00:00:00.000 UDP 28.104.0.1:60648 -> 198.28.0.2:53 1 64 1 2025-10-29 11:59:40.956 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 11:59:40.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60648 1 109 1 2025-10-29 11:59:40.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47414 1 80 1 2025-10-29 11:54:58.347 00:05:50.808 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 12:00:40.390 00:00:00.000 UDP 28.104.0.1:50731 -> 198.28.0.2:53 1 64 1 2025-10-29 12:00:40.390 00:00:00.000 UDP 28.104.0.1:35409 -> 198.28.0.2:53 1 64 1 2025-10-29 12:00:40.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50731 1 80 1 2025-10-29 12:00:40.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35409 1 109 1 2025-10-29 11:55:58.396 00:05:50.769 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:01:40.674 00:00:00.000 UDP 28.104.0.1:41441 -> 198.28.0.2:53 1 64 1 2025-10-29 12:01:40.674 00:00:00.000 UDP 28.104.0.1:52012 -> 198.28.0.2:53 1 64 1 2025-10-29 12:01:40.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52012 1 109 1 2025-10-29 12:01:40.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41441 1 80 1 2025-10-29 11:56:58.329 00:05:50.876 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 11:59:58.398 00:02:00.027 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 11:59:58.397 00:02:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 5 317 1 2025-10-29 12:02:40.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45831 1 109 1 2025-10-29 12:02:40.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33665 1 80 1 2025-10-29 12:02:40.963 00:00:00.000 UDP 28.104.0.1:33665 -> 198.28.0.2:53 1 64 1 2025-10-29 12:02:40.962 00:00:00.000 UDP 28.104.0.1:45831 -> 198.28.0.2:53 1 64 1 2025-10-29 12:03:41.260 00:00:00.000 UDP 28.104.0.1:46196 -> 198.28.0.2:53 1 64 1 2025-10-29 12:03:41.260 00:00:00.000 UDP 28.104.0.1:39105 -> 198.28.0.2:53 1 64 1 2025-10-29 12:03:41.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39105 1 109 1 2025-10-29 12:03:41.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46196 1 80 1 2025-10-29 11:58:58.408 00:05:50.748 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 12:02:58.397 00:01:00.027 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:02:58.397 00:01:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-10-29 11:59:44.709 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-10-29 12:04:41.510 00:00:00.000 UDP 28.104.0.1:50437 -> 198.28.0.2:53 1 64 1 2025-10-29 12:04:41.510 00:00:00.000 UDP 28.104.0.1:54031 -> 198.28.0.2:53 1 64 1 2025-10-29 12:04:40.948 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:04:41.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50437 1 80 1 2025-10-29 12:04:41.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54031 1 109 1 2025-10-29 12:05:41.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47415 1 80 1 2025-10-29 12:05:41.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46151 1 109 1 2025-10-29 12:05:41.805 00:00:00.000 UDP 28.104.0.1:46151 -> 198.28.0.2:53 1 64 1 2025-10-29 12:05:41.805 00:00:00.000 UDP 28.104.0.1:47415 -> 198.28.0.2:53 1 64 1 2025-10-29 12:00:58.340 00:05:50.816 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 12:06:42.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44924 1 80 1 2025-10-29 12:06:42.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49529 1 109 1 2025-10-29 12:06:42.102 00:00:00.000 UDP 28.104.0.1:49529 -> 198.28.0.2:53 1 64 1 2025-10-29 12:06:42.102 00:00:00.000 UDP 28.104.0.1:44924 -> 198.28.0.2:53 1 64 1 2025-10-29 12:01:58.397 00:05:50.769 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:04:58.409 00:02:00.024 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:04:58.401 00:02:00.011 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 12:07:42.400 00:00:00.000 UDP 28.104.0.1:49778 -> 198.28.0.2:53 1 64 1 2025-10-29 12:07:42.400 00:00:00.000 UDP 28.104.0.1:55096 -> 198.28.0.2:53 1 64 1 2025-10-29 12:07:42.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55096 1 80 1 2025-10-29 12:07:42.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49778 1 109 1 2025-10-29 12:02:58.330 00:05:50.876 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 12:08:42.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55584 1 109 1 2025-10-29 12:08:42.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53188 1 80 1 2025-10-29 12:08:42.698 00:00:00.000 UDP 28.104.0.1:55584 -> 198.28.0.2:53 1 64 1 2025-10-29 12:08:42.698 00:00:00.000 UDP 28.104.0.1:53188 -> 198.28.0.2:53 1 64 1 2025-10-29 12:07:58.411 00:01:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:07:58.361 00:01:00.051 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 12:05:04.718 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-10-29 12:09:42.990 00:00:00.000 UDP 28.104.0.1:39243 -> 198.28.0.2:53 1 64 1 2025-10-29 12:09:42.990 00:00:00.000 UDP 28.104.0.1:52700 -> 198.28.0.2:53 1 64 1 2025-10-29 12:09:41.273 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:09:43.000 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39243 1 109 1 2025-10-29 12:09:43.000 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52700 1 80 1 2025-10-29 12:04:58.420 00:05:50.737 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 12:10:43.290 00:00:00.000 UDP 28.104.0.1:50565 -> 198.28.0.2:53 1 64 1 2025-10-29 12:10:43.290 00:00:00.000 UDP 28.104.0.1:35094 -> 198.28.0.2:53 1 64 1 2025-10-29 12:10:43.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35094 1 109 1 2025-10-29 12:10:43.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50565 1 80 1 2025-10-29 12:11:43.586 00:00:00.000 UDP 28.104.0.1:51738 -> 198.28.0.2:53 1 64 1 2025-10-29 12:11:43.586 00:00:00.000 UDP 28.104.0.1:57391 -> 198.28.0.2:53 1 64 1 2025-10-29 12:11:43.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51738 1 109 1 2025-10-29 12:11:43.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57391 1 80 1 2025-10-29 12:06:58.347 00:05:50.810 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 12:09:58.412 00:02:00.024 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:12:43.879 00:00:00.000 UDP 28.104.0.1:52669 -> 198.28.0.2:53 1 64 1 2025-10-29 12:12:43.880 00:00:00.000 UDP 28.104.0.1:58295 -> 198.28.0.2:53 1 64 1 2025-10-29 12:12:43.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52669 1 80 1 2025-10-29 12:12:43.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58295 1 109 1 2025-10-29 12:07:58.410 00:05:50.756 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:13:44.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58220 1 80 1 2025-10-29 12:13:44.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42649 1 109 1 2025-10-29 12:13:44.142 00:00:00.000 UDP 28.104.0.1:42649 -> 198.28.0.2:53 1 64 1 2025-10-29 12:13:44.142 00:00:00.000 UDP 28.104.0.1:58220 -> 198.28.0.2:53 1 64 1 2025-10-29 12:08:58.337 00:05:50.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 12:09:58.362 00:04:00.052 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-29 12:12:58.414 00:01:00.023 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:10:24.724 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2480 1 2025-10-29 12:14:41.328 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:14:46.010 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55198 1 80 1 2025-10-29 12:14:46.010 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51866 1 109 1 2025-10-29 12:14:45.999 00:00:00.000 UDP 28.104.0.1:55198 -> 198.28.0.2:53 1 64 1 2025-10-29 12:14:45.999 00:00:00.000 UDP 28.104.0.1:51866 -> 198.28.0.2:53 1 64 1 2025-10-29 12:15:46.298 00:00:00.000 UDP 28.104.0.1:60072 -> 198.28.0.2:53 1 64 1 2025-10-29 12:15:46.298 00:00:00.000 UDP 28.104.0.1:57812 -> 198.28.0.2:53 1 64 1 2025-10-29 12:15:46.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57812 1 80 1 2025-10-29 12:15:46.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60072 1 109 1 2025-10-29 12:10:58.423 00:05:50.735 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 12:14:58.367 00:01:00.047 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 12:16:46.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50779 1 109 1 2025-10-29 12:16:46.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58042 1 80 1 2025-10-29 12:16:46.589 00:00:00.000 UDP 28.104.0.1:58042 -> 198.28.0.2:53 1 64 1 2025-10-29 12:16:46.589 00:00:00.000 UDP 28.104.0.1:50779 -> 198.28.0.2:53 1 64 1 2025-10-29 12:14:58.414 00:02:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:17:46.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42980 1 109 1 2025-10-29 12:17:46.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50421 1 80 1 2025-10-29 12:17:46.886 00:00:00.000 UDP 28.104.0.1:50421 -> 198.28.0.2:53 1 64 1 2025-10-29 12:17:46.886 00:00:00.000 UDP 28.104.0.1:42980 -> 198.28.0.2:53 1 64 1 2025-10-29 12:12:58.347 00:05:50.811 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 12:18:47.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44527 1 80 1 2025-10-29 12:18:47.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44477 1 109 1 2025-10-29 12:18:47.256 00:00:00.000 UDP 28.104.0.1:44527 -> 198.28.0.2:53 1 64 1 2025-10-29 12:18:47.256 00:00:00.000 UDP 28.104.0.1:44477 -> 198.28.0.2:53 1 64 1 2025-10-29 12:13:58.414 00:05:50.756 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:17:58.416 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:16:58.366 00:02:00.051 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 12:19:41.568 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:19:47.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45030 1 109 1 2025-10-29 12:19:47.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32877 1 80 1 2025-10-29 12:19:47.560 00:00:00.000 UDP 28.104.0.1:32877 -> 198.28.0.2:53 1 64 1 2025-10-29 12:19:47.560 00:00:00.000 UDP 28.104.0.1:45030 -> 198.28.0.2:53 1 64 1 2025-10-29 12:14:58.338 00:05:50.872 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 12:15:44.727 00:05:10.080 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2656 1 2025-10-29 12:20:47.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48460 1 109 1 2025-10-29 12:20:47.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36573 1 80 1 2025-10-29 12:20:47.862 00:00:00.000 UDP 28.104.0.1:48460 -> 198.28.0.2:53 1 64 1 2025-10-29 12:20:47.861 00:00:00.000 UDP 28.104.0.1:36573 -> 198.28.0.2:53 1 64 1 2025-10-29 12:19:58.417 00:01:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:19:58.367 00:01:00.054 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 12:21:48.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45928 1 80 1 2025-10-29 12:21:48.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41024 1 109 1 2025-10-29 12:21:48.136 00:00:00.000 UDP 28.104.0.1:45928 -> 198.28.0.2:53 1 64 1 2025-10-29 12:21:48.136 00:00:00.000 UDP 28.104.0.1:41024 -> 198.28.0.2:53 1 64 1 2025-10-29 12:16:58.426 00:05:50.734 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 12:22:48.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55731 1 80 1 2025-10-29 12:22:48.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38228 1 109 1 2025-10-29 12:22:48.428 00:00:00.000 UDP 28.104.0.1:38228 -> 198.28.0.2:53 1 64 1 2025-10-29 12:22:48.428 00:00:00.000 UDP 28.104.0.1:55731 -> 198.28.0.2:53 1 64 1 2025-10-29 12:23:48.722 00:00:00.000 UDP 28.104.0.1:58174 -> 198.28.0.2:53 1 64 1 2025-10-29 12:23:48.722 00:00:00.000 UDP 28.104.0.1:50911 -> 198.28.0.2:53 1 64 1 2025-10-29 12:23:48.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50911 1 80 1 2025-10-29 12:23:48.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58174 1 109 1 2025-10-29 12:18:58.349 00:05:50.811 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 12:21:58.416 00:02:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:21:58.367 00:02:00.050 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 12:24:41.417 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:19:58.417 00:05:50.754 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:24:55.225 00:00:00.000 UDP 28.104.0.1:57007 -> 198.28.0.2:53 1 64 1 2025-10-29 12:24:55.225 00:00:00.000 UDP 28.104.0.1:41052 -> 198.28.0.2:53 1 64 1 2025-10-29 12:24:55.235 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41052 1 109 1 2025-10-29 12:24:55.235 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57007 1 80 1 2025-10-29 12:21:04.737 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2868 1 2025-10-29 12:20:58.340 00:05:50.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 12:24:58.419 00:01:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:24:58.369 00:01:00.050 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 12:25:55.513 00:00:00.000 UDP 28.104.0.1:55387 -> 198.28.0.2:53 1 64 1 2025-10-29 12:25:55.514 00:00:00.000 UDP 28.104.0.1:33206 -> 198.28.0.2:53 1 64 1 2025-10-29 12:25:55.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55387 1 80 1 2025-10-29 12:25:55.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33206 1 109 1 2025-10-29 12:26:55.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60973 1 80 1 2025-10-29 12:26:55.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35243 1 109 1 2025-10-29 12:26:55.807 00:00:00.000 UDP 28.104.0.1:60973 -> 198.28.0.2:53 1 64 1 2025-10-29 12:26:55.806 00:00:00.000 UDP 28.104.0.1:35243 -> 198.28.0.2:53 1 64 1 2025-10-29 12:22:58.428 00:05:50.733 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 12:27:56.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58063 1 80 1 2025-10-29 12:27:56.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42657 1 109 1 2025-10-29 12:27:56.106 00:00:00.000 UDP 28.104.0.1:42657 -> 198.28.0.2:53 1 64 1 2025-10-29 12:27:56.106 00:00:00.000 UDP 28.104.0.1:58063 -> 198.28.0.2:53 1 64 1 2025-10-29 12:26:58.419 00:02:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:28:56.401 00:00:00.000 UDP 28.104.0.1:48838 -> 198.28.0.2:53 1 64 1 2025-10-29 12:28:56.401 00:00:00.000 UDP 28.104.0.1:42944 -> 198.28.0.2:53 1 64 1 2025-10-29 12:26:58.369 00:02:00.051 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 12:28:56.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48838 1 80 1 2025-10-29 12:28:56.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42944 1 109 1 2025-10-29 12:29:41.583 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:24:58.350 00:05:50.811 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 12:29:56.653 00:00:00.000 UDP 28.104.0.1:40521 -> 198.28.0.2:53 1 64 1 2025-10-29 12:29:56.653 00:00:00.000 UDP 28.104.0.1:59117 -> 198.28.0.2:53 1 64 1 2025-10-29 12:29:56.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59117 1 80 1 2025-10-29 12:29:56.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40521 1 109 1 2025-10-29 12:26:24.741 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2532 1 2025-10-29 12:25:58.419 00:05:50.753 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:30:56.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46552 1 109 1 2025-10-29 12:30:56.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60373 1 80 1 2025-10-29 12:29:58.368 00:01:00.051 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 12:30:56.961 00:00:00.000 UDP 28.104.0.1:46552 -> 198.28.0.2:53 1 64 1 2025-10-29 12:30:56.961 00:00:00.000 UDP 28.104.0.1:60373 -> 198.28.0.2:53 1 64 1 2025-10-29 12:29:58.419 00:01:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:26:58.342 00:05:50.870 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 12:31:57.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58488 1 80 1 2025-10-29 12:31:57.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60474 1 109 1 2025-10-29 12:31:57.265 00:00:00.000 UDP 28.104.0.1:58488 -> 198.28.0.2:53 1 64 1 2025-10-29 12:31:57.265 00:00:00.000 UDP 28.104.0.1:60474 -> 198.28.0.2:53 1 64 1 2025-10-29 12:32:57.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33188 1 109 1 2025-10-29 12:32:57.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34689 1 80 1 2025-10-29 12:32:57.567 00:00:00.000 UDP 28.104.0.1:33188 -> 198.28.0.2:53 1 64 1 2025-10-29 12:32:57.567 00:00:00.000 UDP 28.104.0.1:34689 -> 198.28.0.2:53 1 64 1 2025-10-29 12:28:58.429 00:05:50.733 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 12:33:57.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58141 1 109 1 2025-10-29 12:33:57.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48983 1 80 1 2025-10-29 12:31:58.369 00:02:00.052 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 12:33:57.865 00:00:00.000 UDP 28.104.0.1:58141 -> 198.28.0.2:53 1 64 1 2025-10-29 12:31:58.420 00:02:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:33:57.866 00:00:00.000 UDP 28.104.0.1:48983 -> 198.28.0.2:53 1 64 1 2025-10-29 12:34:41.779 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:34:58.181 00:00:00.000 UDP 28.104.0.1:39939 -> 198.28.0.2:53 1 64 1 2025-10-29 12:34:58.182 00:00:00.000 UDP 28.104.0.1:34587 -> 198.28.0.2:53 1 64 1 2025-10-29 12:34:58.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34587 1 109 1 2025-10-29 12:34:58.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39939 1 80 1 2025-10-29 12:30:58.351 00:05:50.814 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 12:35:58.444 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52492 1 109 1 2025-10-29 12:35:58.444 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44687 1 80 1 2025-10-29 12:34:58.371 00:01:00.053 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 12:31:44.747 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-29 12:35:58.434 00:00:00.000 UDP 28.104.0.1:44687 -> 198.28.0.2:53 1 64 1 2025-10-29 12:34:58.423 00:01:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:35:58.434 00:00:00.000 UDP 28.104.0.1:52492 -> 198.28.0.2:53 1 64 1 2025-10-29 12:31:58.420 00:05:50.752 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:36:58.738 00:00:00.000 UDP 28.104.0.1:35119 -> 198.28.0.2:53 1 64 1 2025-10-29 12:36:58.738 00:00:00.000 UDP 28.104.0.1:53444 -> 198.28.0.2:53 1 64 1 2025-10-29 12:36:58.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35119 1 109 1 2025-10-29 12:36:58.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53444 1 80 1 2025-10-29 12:32:58.342 00:05:50.873 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 12:37:59.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38606 1 80 1 2025-10-29 12:37:59.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34777 1 109 1 2025-10-29 12:37:59.056 00:00:00.000 UDP 28.104.0.1:38606 -> 198.28.0.2:53 1 64 1 2025-10-29 12:37:59.056 00:00:00.000 UDP 28.104.0.1:34777 -> 198.28.0.2:53 1 64 1 2025-10-29 12:36:58.422 00:02:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:36:58.370 00:02:00.053 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 12:39:00.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32825 1 80 1 2025-10-29 12:39:00.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37662 1 109 1 2025-10-29 12:39:00.073 00:00:00.000 UDP 28.104.0.1:32825 -> 198.28.0.2:53 1 64 1 2025-10-29 12:39:00.073 00:00:00.000 UDP 28.104.0.1:37662 -> 198.28.0.2:53 1 64 1 2025-10-29 12:39:41.835 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:34:58.430 00:05:50.732 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 12:40:00.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55721 1 109 1 2025-10-29 12:40:00.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54095 1 80 1 2025-10-29 12:40:00.372 00:00:00.000 UDP 28.104.0.1:54095 -> 198.28.0.2:53 1 64 1 2025-10-29 12:40:00.372 00:00:00.000 UDP 28.104.0.1:55721 -> 198.28.0.2:53 1 64 1 2025-10-29 12:39:58.423 00:01:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:39:58.371 00:01:00.053 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 12:41:00.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56792 1 80 1 2025-10-29 12:41:00.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34880 1 109 1 2025-10-29 12:41:00.673 00:00:00.000 UDP 28.104.0.1:34880 -> 198.28.0.2:53 1 64 1 2025-10-29 12:41:00.673 00:00:00.000 UDP 28.104.0.1:56792 -> 198.28.0.2:53 1 64 1 2025-10-29 12:37:04.754 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2480 1 2025-10-29 12:36:58.354 00:05:50.809 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 12:42:00.987 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42225 1 109 1 2025-10-29 12:42:00.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54809 1 80 1 2025-10-29 12:42:00.978 00:00:00.000 UDP 28.104.0.1:54809 -> 198.28.0.2:53 1 64 1 2025-10-29 12:42:00.978 00:00:00.000 UDP 28.104.0.1:42225 -> 198.28.0.2:53 1 64 1 2025-10-29 12:37:58.423 00:05:50.753 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:43:01.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44431 1 109 1 2025-10-29 12:43:01.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55578 1 80 1 2025-10-29 12:43:01.284 00:00:00.000 UDP 28.104.0.1:44431 -> 198.28.0.2:53 1 64 1 2025-10-29 12:43:01.284 00:00:00.000 UDP 28.104.0.1:55578 -> 198.28.0.2:53 1 64 1 2025-10-29 12:38:58.344 00:05:50.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 12:41:58.425 00:02:00.018 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:44:01.587 00:00:00.000 UDP 28.104.0.1:60384 -> 198.28.0.2:53 1 64 1 2025-10-29 12:44:01.587 00:00:00.000 UDP 28.104.0.1:45324 -> 198.28.0.2:53 1 64 1 2025-10-29 12:44:01.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45324 1 80 1 2025-10-29 12:44:01.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60384 1 109 1 2025-10-29 12:44:41.934 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:45:01.856 00:00:00.000 UDP 28.104.0.1:54163 -> 198.28.0.2:53 1 64 1 2025-10-29 12:45:01.856 00:00:00.000 UDP 28.104.0.1:59382 -> 198.28.0.2:53 1 64 1 2025-10-29 12:45:01.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59382 1 109 1 2025-10-29 12:45:01.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54163 1 80 1 2025-10-29 12:40:58.435 00:05:50.733 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 12:46:02.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46751 1 109 1 2025-10-29 12:46:02.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55184 1 80 1 2025-10-29 12:44:58.427 00:01:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:41:58.371 00:04:00.056 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-29 12:46:02.172 00:00:00.000 UDP 28.104.0.1:46751 -> 198.28.0.2:53 1 64 1 2025-10-29 12:46:02.172 00:00:00.000 UDP 28.104.0.1:55184 -> 198.28.0.2:53 1 64 1 2025-10-29 12:42:24.755 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-29 12:47:02.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37693 1 80 1 2025-10-29 12:47:02.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50451 1 109 1 2025-10-29 12:47:02.482 00:00:00.000 UDP 28.104.0.1:37693 -> 198.28.0.2:53 1 64 1 2025-10-29 12:47:02.482 00:00:00.000 UDP 28.104.0.1:50451 -> 198.28.0.2:53 1 64 1 2025-10-29 12:42:58.355 00:05:50.811 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 12:46:58.371 00:01:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 12:48:02.735 00:00:00.000 UDP 28.104.0.1:53644 -> 198.28.0.2:53 1 64 1 2025-10-29 12:48:02.735 00:00:00.000 UDP 28.104.0.1:34252 -> 198.28.0.2:53 1 64 1 2025-10-29 12:48:02.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53644 1 109 1 2025-10-29 12:48:02.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34252 1 80 1 2025-10-29 12:43:58.425 00:05:50.751 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:46:58.426 00:02:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:49:03.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51295 1 80 1 2025-10-29 12:49:03.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48907 1 109 1 2025-10-29 12:49:03.058 00:00:00.000 UDP 28.104.0.1:48907 -> 198.28.0.2:53 1 64 1 2025-10-29 12:49:03.058 00:00:00.000 UDP 28.104.0.1:51295 -> 198.28.0.2:53 1 64 1 2025-10-29 12:49:41.915 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:44:58.346 00:05:50.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 12:50:03.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41910 1 109 1 2025-10-29 12:50:03.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52764 1 80 1 2025-10-29 12:50:03.361 00:00:00.000 UDP 28.104.0.1:41910 -> 198.28.0.2:53 1 64 1 2025-10-29 12:50:03.361 00:00:00.000 UDP 28.104.0.1:52764 -> 198.28.0.2:53 1 64 1 2025-10-29 12:49:58.429 00:01:00.017 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:48:58.372 00:02:00.057 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 12:51:03.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54822 1 109 1 2025-10-29 12:51:03.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46840 1 80 1 2025-10-29 12:51:03.647 00:00:00.000 UDP 28.104.0.1:46840 -> 198.28.0.2:53 1 64 1 2025-10-29 12:51:03.647 00:00:00.000 UDP 28.104.0.1:54822 -> 198.28.0.2:53 1 64 1 2025-10-29 12:46:58.437 00:05:50.744 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 12:47:44.764 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2924 1 2025-10-29 12:52:03.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58084 1 80 1 2025-10-29 12:52:03.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47866 1 109 1 2025-10-29 12:52:03.944 00:00:00.000 UDP 28.104.0.1:47866 -> 198.28.0.2:53 1 64 1 2025-10-29 12:52:03.941 00:00:00.000 UDP 28.104.0.1:58084 -> 198.28.0.2:53 1 64 1 2025-10-29 12:51:58.372 00:01:00.057 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 12:51:58.429 00:01:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:53:04.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56311 1 80 1 2025-10-29 12:53:04.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58342 1 109 1 2025-10-29 12:53:04.250 00:00:00.000 UDP 28.104.0.1:56311 -> 198.28.0.2:53 1 64 1 2025-10-29 12:53:04.250 00:00:00.000 UDP 28.104.0.1:58342 -> 198.28.0.2:53 1 64 1 2025-10-29 12:48:58.356 00:05:50.827 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 12:54:04.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44692 1 80 1 2025-10-29 12:54:04.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35955 1 109 1 2025-10-29 12:54:04.595 00:00:00.000 UDP 28.104.0.1:35955 -> 198.28.0.2:53 1 64 1 2025-10-29 12:54:04.594 00:00:00.000 UDP 28.104.0.1:44692 -> 198.28.0.2:53 1 64 1 2025-10-29 12:54:42.402 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:49:58.429 00:05:50.765 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:55:04.889 00:00:00.000 UDP 28.104.0.1:49354 -> 198.28.0.2:53 1 64 1 2025-10-29 12:55:04.889 00:00:00.000 UDP 28.104.0.1:54717 -> 198.28.0.2:53 1 64 1 2025-10-29 12:55:04.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49354 1 80 1 2025-10-29 12:55:04.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54717 1 109 1 2025-10-29 12:50:58.347 00:05:50.887 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 12:53:58.430 00:02:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:53:58.373 00:02:00.057 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 12:56:05.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49653 1 109 1 2025-10-29 12:56:05.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34620 1 80 1 2025-10-29 12:56:05.198 00:00:00.000 UDP 28.104.0.1:34620 -> 198.28.0.2:53 1 64 1 2025-10-29 12:56:05.198 00:00:00.000 UDP 28.104.0.1:49653 -> 198.28.0.2:53 1 64 1 2025-10-29 12:57:06.217 00:00:00.000 UDP 28.104.0.1:33275 -> 198.28.0.2:53 1 64 1 2025-10-29 12:57:06.217 00:00:00.000 UDP 28.104.0.1:60762 -> 198.28.0.2:53 1 64 1 2025-10-29 12:57:06.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60762 1 80 1 2025-10-29 12:57:06.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33275 1 109 1 2025-10-29 12:53:04.770 00:05:10.014 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2668 1 2025-10-29 12:52:58.440 00:05:50.743 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 12:56:58.429 00:01:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 12:56:58.374 00:01:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 12:58:06.520 00:00:00.000 UDP 28.104.0.1:50936 -> 198.28.0.2:53 1 64 1 2025-10-29 12:58:06.520 00:00:00.000 UDP 28.104.0.1:53270 -> 198.28.0.2:53 1 64 1 2025-10-29 12:58:06.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53270 1 109 1 2025-10-29 12:58:06.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50936 1 80 1 Summary: total flows: 347, total bytes: 94233, total packets: 1389, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-10-29 11:54:58 - 2025-10-29 12:58:49 Total flows processed: 347, passed: 347, Blocks skipped: 0, Bytes read: 36152 Sys: 0.0058s User: 0.0023s Wall: 0.0042s flows/second: 82619.4 Runtime: 0.0042s