Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 12:59:06.817 00:00:00.000 UDP 28.104.0.1:36525 -> 198.28.0.2:53 1 64 1 2025-10-29 12:59:06.817 00:00:00.000 UDP 28.104.0.1:52584 -> 198.28.0.2:53 1 64 1 2025-10-29 12:59:06.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52584 1 109 1 2025-10-29 12:59:06.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36525 1 80 1 2025-10-29 12:59:42.171 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 12:54:58.357 00:05:50.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 13:00:07.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60301 1 109 1 2025-10-29 13:00:07.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38270 1 80 1 2025-10-29 13:00:07.123 00:00:00.000 UDP 28.104.0.1:38270 -> 198.28.0.2:53 1 64 1 2025-10-29 13:00:07.123 00:00:00.000 UDP 28.104.0.1:60301 -> 198.28.0.2:53 1 64 1 2025-10-29 12:55:58.430 00:05:50.765 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 12:58:58.430 00:02:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 12:58:58.374 00:02:00.057 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:01:07.425 00:00:00.000 UDP 28.104.0.1:44937 -> 198.28.0.2:53 1 64 1 2025-10-29 13:01:07.425 00:00:00.000 UDP 28.104.0.1:58477 -> 198.28.0.2:53 1 64 1 2025-10-29 13:01:07.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44937 1 109 1 2025-10-29 13:01:07.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58477 1 80 1 2025-10-29 12:56:58.349 00:05:50.887 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 13:02:07.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50431 1 109 1 2025-10-29 13:02:07.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49514 1 80 1 2025-10-29 13:02:07.680 00:00:00.000 UDP 28.104.0.1:49514 -> 198.28.0.2:53 1 64 1 2025-10-29 13:02:07.680 00:00:00.000 UDP 28.104.0.1:50431 -> 198.28.0.2:53 1 64 1 2025-10-29 12:58:24.787 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-10-29 13:01:58.431 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:01:58.375 00:01:00.058 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:03:08.046 00:00:00.000 UDP 28.104.0.1:58334 -> 198.28.0.2:53 1 64 1 2025-10-29 13:03:08.046 00:00:00.000 UDP 28.104.0.1:41516 -> 198.28.0.2:53 1 64 1 2025-10-29 13:03:08.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41516 1 80 1 2025-10-29 13:03:08.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58334 1 109 1 2025-10-29 12:58:58.440 00:05:50.745 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 13:04:08.342 00:00:00.000 UDP 28.104.0.1:35046 -> 198.28.0.2:53 1 64 1 2025-10-29 13:04:08.341 00:00:00.000 UDP 28.104.0.1:48336 -> 198.28.0.2:53 1 64 1 2025-10-29 13:04:08.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35046 1 80 1 2025-10-29 13:04:08.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48336 1 109 1 2025-10-29 13:04:42.743 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:05:08.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44539 1 109 1 2025-10-29 13:05:08.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52310 1 80 1 2025-10-29 13:05:08.635 00:00:00.000 UDP 28.104.0.1:44539 -> 198.28.0.2:53 1 64 1 2025-10-29 13:05:08.635 00:00:00.000 UDP 28.104.0.1:52310 -> 198.28.0.2:53 1 64 1 2025-10-29 13:00:58.358 00:05:50.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 13:03:58.433 00:02:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 13:03:58.375 00:02:00.058 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:06:08.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53600 1 80 1 2025-10-29 13:06:08.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59709 1 109 1 2025-10-29 13:06:08.895 00:00:00.000 UDP 28.104.0.1:59709 -> 198.28.0.2:53 1 64 1 2025-10-29 13:06:08.895 00:00:00.000 UDP 28.104.0.1:53600 -> 198.28.0.2:53 1 64 1 2025-10-29 13:01:58.432 00:05:50.765 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 13:07:09.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46955 1 80 1 2025-10-29 13:07:09.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36810 1 109 1 2025-10-29 13:07:09.203 00:00:00.000 UDP 28.104.0.1:36810 -> 198.28.0.2:53 1 64 1 2025-10-29 13:07:09.203 00:00:00.000 UDP 28.104.0.1:46955 -> 198.28.0.2:53 1 64 1 2025-10-29 13:02:58.349 00:05:50.888 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 13:06:58.440 00:01:00.013 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:06:58.381 00:01:00.058 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:03:44.796 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-29 13:08:09.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55293 1 109 1 2025-10-29 13:08:09.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59751 1 80 1 2025-10-29 13:08:09.495 00:00:00.000 UDP 28.104.0.1:55293 -> 198.28.0.2:53 1 64 1 2025-10-29 13:08:09.495 00:00:00.000 UDP 28.104.0.1:59751 -> 198.28.0.2:53 1 64 1 2025-10-29 13:09:09.843 00:00:00.000 UDP 28.104.0.1:46390 -> 198.28.0.2:53 1 64 1 2025-10-29 13:09:09.842 00:00:00.000 UDP 28.104.0.1:48685 -> 198.28.0.2:53 1 64 1 2025-10-29 13:09:09.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46390 1 80 1 2025-10-29 13:09:09.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48685 1 109 1 2025-10-29 13:09:42.545 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:04:58.444 00:05:50.743 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 13:10:10.167 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41923 1 80 1 2025-10-29 13:10:10.166 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50318 1 109 1 2025-10-29 13:10:10.156 00:00:00.000 UDP 28.104.0.1:41923 -> 198.28.0.2:53 1 64 1 2025-10-29 13:10:10.156 00:00:00.000 UDP 28.104.0.1:50318 -> 198.28.0.2:53 1 64 1 2025-10-29 13:08:58.439 00:02:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 13:08:58.380 00:02:00.059 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:11:10.460 00:00:00.000 UDP 28.104.0.1:39382 -> 198.28.0.2:53 1 64 1 2025-10-29 13:11:10.460 00:00:00.000 UDP 28.104.0.1:38384 -> 198.28.0.2:53 1 64 1 2025-10-29 13:11:10.469 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39382 1 80 1 2025-10-29 13:11:10.469 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38384 1 109 1 2025-10-29 13:06:58.359 00:05:50.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 13:12:10.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37873 1 80 1 2025-10-29 13:12:10.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33739 1 109 1 2025-10-29 13:12:10.759 00:00:00.000 UDP 28.104.0.1:33739 -> 198.28.0.2:53 1 64 1 2025-10-29 13:12:10.759 00:00:00.000 UDP 28.104.0.1:37873 -> 198.28.0.2:53 1 64 1 2025-10-29 13:07:58.439 00:05:50.759 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 13:11:58.440 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:11:58.383 00:01:00.057 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:09:04.803 00:05:00.425 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2476 1 2025-10-29 13:13:11.055 00:00:00.000 UDP 28.104.0.1:51679 -> 198.28.0.2:53 1 64 1 2025-10-29 13:13:11.056 00:00:00.000 UDP 28.104.0.1:46813 -> 198.28.0.2:53 1 64 1 2025-10-29 13:13:11.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51679 1 80 1 2025-10-29 13:13:11.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46813 1 109 1 2025-10-29 13:08:58.351 00:05:50.888 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 13:14:11.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60185 1 109 1 2025-10-29 13:14:11.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47021 1 80 1 2025-10-29 13:14:11.356 00:00:00.000 UDP 28.104.0.1:47021 -> 198.28.0.2:53 1 64 1 2025-10-29 13:14:11.356 00:00:00.000 UDP 28.104.0.1:60185 -> 198.28.0.2:53 1 64 1 2025-10-29 13:14:42.431 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:15:11.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38139 1 109 1 2025-10-29 13:15:11.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58106 1 80 1 2025-10-29 13:15:11.658 00:00:00.000 UDP 28.104.0.1:38139 -> 198.28.0.2:53 1 64 1 2025-10-29 13:15:11.658 00:00:00.000 UDP 28.104.0.1:58106 -> 198.28.0.2:53 1 64 1 2025-10-29 13:10:58.449 00:05:50.738 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 13:13:58.439 00:02:00.023 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 13:13:58.384 00:02:00.056 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:16:11.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39355 1 80 1 2025-10-29 13:16:11.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40028 1 109 1 2025-10-29 13:16:11.948 00:00:00.000 UDP 28.104.0.1:40028 -> 198.28.0.2:53 1 64 1 2025-10-29 13:16:11.949 00:00:00.000 UDP 28.104.0.1:39355 -> 198.28.0.2:53 1 64 1 2025-10-29 13:17:12.254 00:00:00.000 UDP 28.104.0.1:54115 -> 198.28.0.2:53 1 64 1 2025-10-29 13:17:12.254 00:00:00.000 UDP 28.104.0.1:37389 -> 198.28.0.2:53 1 64 1 2025-10-29 13:17:12.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54115 1 80 1 2025-10-29 13:17:12.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37389 1 109 1 2025-10-29 13:12:58.361 00:05:50.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 13:16:58.441 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:16:58.385 00:01:00.056 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:18:12.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33561 1 109 1 2025-10-29 13:18:12.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46485 1 80 1 2025-10-29 13:18:12.525 00:00:00.000 UDP 28.104.0.1:33561 -> 198.28.0.2:53 1 64 1 2025-10-29 13:18:12.525 00:00:00.000 UDP 28.104.0.1:46485 -> 198.28.0.2:53 1 64 1 2025-10-29 13:14:14.816 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2600 1 2025-10-29 13:13:58.440 00:05:50.758 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 13:19:12.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47207 1 80 1 2025-10-29 13:19:12.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57375 1 109 1 2025-10-29 13:19:12.815 00:00:00.000 UDP 28.104.0.1:57375 -> 198.28.0.2:53 1 64 1 2025-10-29 13:19:12.815 00:00:00.000 UDP 28.104.0.1:47207 -> 198.28.0.2:53 1 64 1 2025-10-29 13:19:42.773 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:14:58.353 00:05:50.887 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 13:18:58.386 00:01:00.058 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:20:13.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58196 1 109 1 2025-10-29 13:20:13.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45310 1 80 1 2025-10-29 13:20:13.111 00:00:00.000 UDP 28.104.0.1:45310 -> 198.28.0.2:53 1 64 1 2025-10-29 13:20:13.111 00:00:00.000 UDP 28.104.0.1:58196 -> 198.28.0.2:53 1 64 1 2025-10-29 13:18:58.444 00:02:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 13:21:13.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46105 1 80 1 2025-10-29 13:21:13.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44969 1 109 1 2025-10-29 13:21:13.953 00:00:00.000 UDP 28.104.0.1:44969 -> 198.28.0.2:53 1 64 1 2025-10-29 13:21:13.953 00:00:00.000 UDP 28.104.0.1:46105 -> 198.28.0.2:53 1 64 1 2025-10-29 13:16:58.452 00:05:50.740 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 13:22:14.255 00:00:00.000 UDP 28.104.0.1:47067 -> 198.28.0.2:53 1 64 1 2025-10-29 13:22:14.255 00:00:00.000 UDP 28.104.0.1:59674 -> 198.28.0.2:53 1 64 1 2025-10-29 13:22:14.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47067 1 80 1 2025-10-29 13:22:14.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59674 1 109 1 2025-10-29 13:21:58.445 00:01:00.018 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:20:58.387 00:02:00.058 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:23:14.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44265 1 109 1 2025-10-29 13:23:14.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43597 1 80 1 2025-10-29 13:23:14.547 00:00:00.000 UDP 28.104.0.1:43597 -> 198.28.0.2:53 1 64 1 2025-10-29 13:23:14.547 00:00:00.000 UDP 28.104.0.1:44265 -> 198.28.0.2:53 1 64 1 2025-10-29 13:19:34.823 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2944 1 2025-10-29 13:18:58.362 00:05:50.829 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 13:24:14.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45616 1 80 1 2025-10-29 13:24:14.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50507 1 109 1 2025-10-29 13:24:14.811 00:00:00.000 UDP 28.104.0.1:45616 -> 198.28.0.2:53 1 64 1 2025-10-29 13:24:14.811 00:00:00.000 UDP 28.104.0.1:50507 -> 198.28.0.2:53 1 64 1 2025-10-29 13:24:42.705 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:19:58.443 00:05:50.759 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 13:23:58.447 00:01:00.018 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:23:58.389 00:01:00.058 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:25:15.072 00:00:00.000 UDP 28.104.0.1:41958 -> 198.28.0.2:53 1 64 1 2025-10-29 13:25:15.072 00:00:00.000 UDP 28.104.0.1:51560 -> 198.28.0.2:53 1 64 1 2025-10-29 13:25:15.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41958 1 109 1 2025-10-29 13:25:15.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51560 1 80 1 2025-10-29 13:20:58.353 00:05:50.890 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 13:25:58.447 00:00:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-29 13:26:15.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36666 1 80 1 2025-10-29 13:26:15.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55553 1 109 1 2025-10-29 13:26:15.375 00:00:00.000 UDP 28.104.0.1:36666 -> 198.28.0.2:53 1 64 1 2025-10-29 13:26:15.375 00:00:00.000 UDP 28.104.0.1:55553 -> 198.28.0.2:53 1 64 1 2025-10-29 13:27:15.670 00:00:00.000 UDP 28.104.0.1:54943 -> 198.28.0.2:53 1 64 1 2025-10-29 13:27:15.669 00:00:00.000 UDP 28.104.0.1:51412 -> 198.28.0.2:53 1 64 1 2025-10-29 13:27:15.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54943 1 109 1 2025-10-29 13:27:15.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51412 1 80 1 2025-10-29 13:22:58.456 00:05:50.736 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 13:26:58.446 00:01:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:25:58.388 00:02:00.058 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:28:15.970 00:00:00.000 UDP 28.104.0.1:44722 -> 198.28.0.2:53 1 64 1 2025-10-29 13:28:15.970 00:00:00.000 UDP 28.104.0.1:34821 -> 198.28.0.2:53 1 64 1 2025-10-29 13:28:15.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44722 1 109 1 2025-10-29 13:28:15.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34821 1 80 1 2025-10-29 13:24:54.828 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-10-29 13:29:16.287 00:00:00.000 UDP 28.104.0.1:53124 -> 198.28.0.2:53 1 64 1 2025-10-29 13:29:16.286 00:00:00.000 UDP 28.104.0.1:44677 -> 198.28.0.2:53 1 64 1 2025-10-29 13:29:16.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44677 1 109 1 2025-10-29 13:29:16.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53124 1 80 1 2025-10-29 13:29:43.548 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:24:58.364 00:05:50.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 13:28:58.447 00:01:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:28:58.389 00:01:00.058 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:30:16.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54761 1 109 1 2025-10-29 13:30:16.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40809 1 80 1 2025-10-29 13:30:16.545 00:00:00.000 UDP 28.104.0.1:54761 -> 198.28.0.2:53 1 64 1 2025-10-29 13:30:16.545 00:00:00.000 UDP 28.104.0.1:40809 -> 198.28.0.2:53 1 64 1 2025-10-29 13:25:58.446 00:05:50.756 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 13:31:16.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46523 1 109 1 2025-10-29 13:31:16.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52034 1 80 1 2025-10-29 13:31:16.831 00:00:00.000 UDP 28.104.0.1:46523 -> 198.28.0.2:53 1 64 1 2025-10-29 13:31:16.831 00:00:00.000 UDP 28.104.0.1:52034 -> 198.28.0.2:53 1 64 1 2025-10-29 13:26:58.356 00:05:50.889 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 13:32:17.139 00:00:00.000 UDP 28.104.0.1:44181 -> 198.28.0.2:53 1 64 1 2025-10-29 13:32:17.139 00:00:00.000 UDP 28.104.0.1:56391 -> 198.28.0.2:53 1 64 1 2025-10-29 13:32:17.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44181 1 109 1 2025-10-29 13:32:17.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56391 1 80 1 2025-10-29 13:30:58.390 00:02:00.057 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:30:58.447 00:02:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 13:33:17.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50784 1 80 1 2025-10-29 13:33:17.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33128 1 109 1 2025-10-29 13:33:17.443 00:00:00.000 UDP 28.104.0.1:33128 -> 198.28.0.2:53 1 64 1 2025-10-29 13:33:17.442 00:00:00.000 UDP 28.104.0.1:50784 -> 198.28.0.2:53 1 64 1 2025-10-29 13:28:58.458 00:05:50.737 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 13:34:17.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41642 1 80 1 2025-10-29 13:34:17.751 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45341 1 109 1 2025-10-29 13:34:17.742 00:00:00.000 UDP 28.104.0.1:41642 -> 198.28.0.2:53 1 64 1 2025-10-29 13:34:17.741 00:00:00.000 UDP 28.104.0.1:45341 -> 198.28.0.2:53 1 64 1 2025-10-29 13:30:14.835 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-29 13:34:43.023 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:33:58.448 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:33:58.390 00:01:00.058 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:35:18.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53771 1 80 1 2025-10-29 13:35:18.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51402 1 109 1 2025-10-29 13:35:18.060 00:00:00.000 UDP 28.104.0.1:51402 -> 198.28.0.2:53 1 64 1 2025-10-29 13:35:18.060 00:00:00.000 UDP 28.104.0.1:53771 -> 198.28.0.2:53 1 64 1 2025-10-29 13:30:58.365 00:05:50.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 13:36:18.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38214 1 109 1 2025-10-29 13:36:18.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40918 1 80 1 2025-10-29 13:36:18.311 00:00:00.000 UDP 28.104.0.1:38214 -> 198.28.0.2:53 1 64 1 2025-10-29 13:36:18.311 00:00:00.000 UDP 28.104.0.1:40918 -> 198.28.0.2:53 1 64 1 2025-10-29 13:31:58.446 00:05:50.757 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 13:37:18.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46864 1 109 1 2025-10-29 13:37:18.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56588 1 80 1 2025-10-29 13:37:18.641 00:00:00.000 UDP 28.104.0.1:56588 -> 198.28.0.2:53 1 64 1 2025-10-29 13:37:18.641 00:00:00.000 UDP 28.104.0.1:46864 -> 198.28.0.2:53 1 64 1 2025-10-29 13:32:58.356 00:05:50.888 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 13:35:58.446 00:02:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 13:35:58.391 00:02:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:38:18.948 00:00:00.000 UDP 28.104.0.1:43243 -> 198.28.0.2:53 1 64 1 2025-10-29 13:38:18.948 00:00:00.000 UDP 28.104.0.1:40012 -> 198.28.0.2:53 1 64 1 2025-10-29 13:38:18.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43243 1 80 1 2025-10-29 13:38:18.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40012 1 109 1 2025-10-29 13:39:19.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57438 1 109 1 2025-10-29 13:39:19.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40176 1 80 1 2025-10-29 13:39:19.253 00:00:00.000 UDP 28.104.0.1:57438 -> 198.28.0.2:53 1 64 1 2025-10-29 13:39:19.252 00:00:00.000 UDP 28.104.0.1:40176 -> 198.28.0.2:53 1 64 1 2025-10-29 13:39:43.157 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:35:34.846 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2480 1 2025-10-29 13:34:58.458 00:05:50.738 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 13:38:58.447 00:01:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:38:58.393 00:01:00.054 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:40:20.068 00:00:00.000 UDP 28.104.0.1:60307 -> 198.28.0.2:53 1 64 1 2025-10-29 13:40:20.068 00:00:00.000 UDP 28.104.0.1:33979 -> 198.28.0.2:53 1 64 1 2025-10-29 13:40:20.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60307 1 109 1 2025-10-29 13:40:20.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33979 1 80 1 2025-10-29 13:41:20.359 00:00:00.000 UDP 28.104.0.1:39263 -> 198.28.0.2:53 1 64 1 2025-10-29 13:41:20.359 00:00:00.000 UDP 28.104.0.1:53171 -> 198.28.0.2:53 1 64 1 2025-10-29 13:41:20.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53171 1 80 1 2025-10-29 13:41:20.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39263 1 109 1 2025-10-29 13:36:58.366 00:05:50.829 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 13:40:58.393 00:01:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:42:20.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53970 1 109 1 2025-10-29 13:42:20.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32894 1 80 1 2025-10-29 13:42:20.665 00:00:00.000 UDP 28.104.0.1:32894 -> 198.28.0.2:53 1 64 1 2025-10-29 13:42:20.665 00:00:00.000 UDP 28.104.0.1:53970 -> 198.28.0.2:53 1 64 1 2025-10-29 13:37:58.447 00:05:50.759 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 13:40:58.449 00:02:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 13:43:20.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60777 1 109 1 2025-10-29 13:43:20.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34032 1 80 1 2025-10-29 13:43:20.974 00:00:00.000 UDP 28.104.0.1:60777 -> 198.28.0.2:53 1 64 1 2025-10-29 13:43:20.974 00:00:00.000 UDP 28.104.0.1:34032 -> 198.28.0.2:53 1 64 1 2025-10-29 13:38:58.356 00:05:50.890 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 13:44:21.266 00:00:00.000 UDP 28.104.0.1:36167 -> 198.28.0.2:53 1 64 1 2025-10-29 13:44:21.266 00:00:00.000 UDP 28.104.0.1:57688 -> 198.28.0.2:53 1 64 1 2025-10-29 13:44:21.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36167 1 80 1 2025-10-29 13:44:21.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57688 1 109 1 2025-10-29 13:44:43.230 00:00:00.026 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:43:58.449 00:01:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:42:58.394 00:02:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:40:54.848 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-10-29 13:45:21.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57362 1 80 1 2025-10-29 13:45:21.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56444 1 109 1 2025-10-29 13:45:21.564 00:00:00.000 UDP 28.104.0.1:56444 -> 198.28.0.2:53 1 64 1 2025-10-29 13:45:21.564 00:00:00.000 UDP 28.104.0.1:57362 -> 198.28.0.2:53 1 64 1 2025-10-29 13:40:58.458 00:05:50.738 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 13:46:21.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49979 1 80 1 2025-10-29 13:46:21.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42034 1 109 1 2025-10-29 13:46:21.820 00:00:00.000 UDP 28.104.0.1:42034 -> 198.28.0.2:53 1 64 1 2025-10-29 13:46:21.820 00:00:00.000 UDP 28.104.0.1:49979 -> 198.28.0.2:53 1 64 1 2025-10-29 13:45:58.449 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:45:58.394 00:01:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:47:22.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41958 1 109 1 2025-10-29 13:47:22.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36550 1 80 1 2025-10-29 13:47:22.118 00:00:00.000 UDP 28.104.0.1:36550 -> 198.28.0.2:53 1 64 1 2025-10-29 13:47:22.119 00:00:00.000 UDP 28.104.0.1:41958 -> 198.28.0.2:53 1 64 1 2025-10-29 13:42:58.368 00:05:50.829 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 13:47:58.451 00:00:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-29 13:48:22.420 00:00:00.000 UDP 28.104.0.1:35272 -> 198.28.0.2:53 1 64 1 2025-10-29 13:48:22.420 00:00:00.000 UDP 28.104.0.1:38655 -> 198.28.0.2:53 1 64 1 2025-10-29 13:48:22.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38655 1 80 1 2025-10-29 13:48:22.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35272 1 109 1 2025-10-29 13:43:58.450 00:05:50.756 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 13:49:22.689 00:00:00.000 UDP 28.104.0.1:47019 -> 198.28.0.2:53 1 64 1 2025-10-29 13:49:22.690 00:00:00.000 UDP 28.104.0.1:42725 -> 198.28.0.2:53 1 64 1 2025-10-29 13:49:22.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42725 1 109 1 2025-10-29 13:49:22.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47019 1 80 1 2025-10-29 13:49:43.398 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:44:58.357 00:05:50.889 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 13:48:58.451 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:47:58.396 00:02:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:50:22.983 00:00:00.000 UDP 28.104.0.1:38027 -> 198.28.0.2:53 1 64 1 2025-10-29 13:50:22.982 00:00:00.000 UDP 28.104.0.1:40759 -> 198.28.0.2:53 1 64 1 2025-10-29 13:50:22.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40759 1 80 1 2025-10-29 13:50:22.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38027 1 109 1 2025-10-29 13:46:14.850 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2860 1 2025-10-29 13:51:23.281 00:00:00.000 UDP 28.104.0.1:41932 -> 198.28.0.2:53 1 64 1 2025-10-29 13:51:23.281 00:00:00.000 UDP 28.104.0.1:51532 -> 198.28.0.2:53 1 64 1 2025-10-29 13:51:23.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41932 1 109 1 2025-10-29 13:51:23.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51532 1 80 1 2025-10-29 13:46:58.459 00:05:50.737 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 13:50:58.396 00:01:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:50:58.451 00:01:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:52:23.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41088 1 109 1 2025-10-29 13:52:23.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54653 1 80 1 2025-10-29 13:52:23.579 00:00:00.000 UDP 28.104.0.1:54653 -> 198.28.0.2:53 1 64 1 2025-10-29 13:52:23.580 00:00:00.000 UDP 28.104.0.1:41088 -> 198.28.0.2:53 1 64 1 2025-10-29 13:53:23.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57537 1 109 1 2025-10-29 13:53:23.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39173 1 80 1 2025-10-29 13:53:23.876 00:00:00.000 UDP 28.104.0.1:39173 -> 198.28.0.2:53 1 64 1 2025-10-29 13:53:23.876 00:00:00.000 UDP 28.104.0.1:57537 -> 198.28.0.2:53 1 64 1 2025-10-29 13:48:58.373 00:05:50.823 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-29 13:54:24.185 00:00:00.000 UDP 28.104.0.1:50220 -> 198.28.0.2:53 1 64 1 2025-10-29 13:54:24.185 00:00:00.000 UDP 28.104.0.1:33443 -> 198.28.0.2:53 1 64 1 2025-10-29 13:54:24.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50220 1 80 1 2025-10-29 13:54:24.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33443 1 109 1 2025-10-29 13:54:43.451 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-29 13:49:58.450 00:05:50.756 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-29 13:52:58.451 00:02:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-29 13:52:58.395 00:02:00.057 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-29 13:55:24.474 00:00:00.000 UDP 28.104.0.1:37996 -> 198.28.0.2:53 1 64 1 2025-10-29 13:55:24.474 00:00:00.000 UDP 28.104.0.1:39328 -> 198.28.0.2:53 1 64 1 2025-10-29 13:55:24.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39328 1 80 1 2025-10-29 13:55:24.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37996 1 109 1 2025-10-29 13:51:34.852 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2668 1 2025-10-29 13:50:58.363 00:05:50.884 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-29 13:56:24.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55312 1 80 1 2025-10-29 13:56:24.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37756 1 109 1 2025-10-29 13:56:24.771 00:00:00.000 UDP 28.104.0.1:55312 -> 198.28.0.2:53 1 64 1 2025-10-29 13:56:24.771 00:00:00.000 UDP 28.104.0.1:37756 -> 198.28.0.2:53 1 64 1 2025-10-29 13:55:58.452 00:01:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-29 13:55:58.396 00:01:00.056 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-29 13:57:25.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44351 1 80 1 2025-10-29 13:57:25.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38069 1 109 1 2025-10-29 13:57:25.053 00:00:00.000 UDP 28.104.0.1:44351 -> 198.28.0.2:53 1 64 1 2025-10-29 13:57:25.053 00:00:00.000 UDP 28.104.0.1:38069 -> 198.28.0.2:53 1 64 1 2025-10-29 13:52:58.461 00:05:50.735 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-29 13:58:25.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57925 1 109 1 2025-10-29 13:58:25.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58219 1 80 1 2025-10-29 13:58:25.346 00:00:00.000 UDP 28.104.0.1:57925 -> 198.28.0.2:53 1 64 1 2025-10-29 13:58:25.346 00:00:00.000 UDP 28.104.0.1:58219 -> 198.28.0.2:53 1 64 1 Summary: total flows: 353, total bytes: 94274, total packets: 1388, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-10-29 12:54:58 - 2025-10-29 13:58:49 Total flows processed: 353, passed: 353, Blocks skipped: 0, Bytes read: 36776 Sys: 0.0039s User: 0.0039s Wall: 0.0042s flows/second: 83488.7 Runtime: 0.0042s