Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 03:54:05.702 00:05:51.248 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 03:54:56.899 00:05:08.734 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 03:54:05.622 00:06:00.173 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 03:54:05.622 00:06:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 03:59:14.850 00:00:00.000 UDP 28.104.0.1:50639 -> 198.28.0.2:53 1 64 1 2025-11-13 03:55:03.927 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2892 1 2025-11-13 03:59:14.850 00:00:00.000 UDP 28.104.0.1:58446 -> 198.28.0.2:53 1 64 1 2025-11-13 03:59:14.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50639 1 109 1 2025-11-13 03:59:14.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58446 1 80 1 2025-11-13 03:55:56.910 00:05:08.714 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:00:15.174 00:00:00.000 UDP 28.104.0.1:42375 -> 198.28.0.2:53 1 64 1 2025-11-13 04:00:15.174 00:00:00.000 UDP 28.104.0.1:59029 -> 198.28.0.2:53 1 64 1 2025-11-13 04:00:15.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59029 1 80 1 2025-11-13 04:00:15.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42375 1 109 1 2025-11-13 04:01:15.473 00:00:00.000 UDP 28.104.0.1:38392 -> 198.28.0.2:53 1 64 1 2025-11-13 04:01:15.473 00:00:00.000 UDP 28.104.0.1:55729 -> 198.28.0.2:53 1 64 1 2025-11-13 04:01:15.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55729 1 109 1 2025-11-13 04:01:15.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38392 1 80 1 2025-11-13 04:01:44.453 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 03:57:05.713 00:05:51.188 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:02:15.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60952 1 80 1 2025-11-13 04:02:15.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54814 1 109 1 2025-11-13 04:02:15.728 00:00:00.000 UDP 28.104.0.1:60952 -> 198.28.0.2:53 1 64 1 2025-11-13 04:02:15.728 00:00:00.000 UDP 28.104.0.1:54814 -> 198.28.0.2:53 1 64 1 2025-11-13 04:03:16.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45906 1 109 1 2025-11-13 04:03:16.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37784 1 80 1 2025-11-13 04:03:16.054 00:00:00.000 UDP 28.104.0.1:45906 -> 198.28.0.2:53 1 64 1 2025-11-13 04:03:16.054 00:00:00.000 UDP 28.104.0.1:37784 -> 198.28.0.2:53 1 64 1 2025-11-13 04:04:16.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33205 1 80 1 2025-11-13 04:04:16.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38736 1 109 1 2025-11-13 04:04:16.355 00:00:00.000 UDP 28.104.0.1:33205 -> 198.28.0.2:53 1 64 1 2025-11-13 04:04:16.355 00:00:00.000 UDP 28.104.0.1:38736 -> 198.28.0.2:53 1 64 1 2025-11-13 04:00:23.935 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2640 1 2025-11-13 04:00:05.705 00:05:51.248 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:00:56.900 00:05:08.733 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:05:16.658 00:00:00.000 UDP 28.104.0.1:46779 -> 198.28.0.2:53 1 64 1 2025-11-13 04:05:16.658 00:00:00.000 UDP 28.104.0.1:36018 -> 198.28.0.2:53 1 64 1 2025-11-13 04:05:16.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46779 1 80 1 2025-11-13 04:05:16.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36018 1 109 1 2025-11-13 04:01:05.624 00:06:00.176 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:01:56.911 00:05:08.714 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:01:05.624 00:06:00.159 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:06:16.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57906 1 109 1 2025-11-13 04:06:16.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37552 1 80 1 2025-11-13 04:06:16.965 00:00:00.000 UDP 28.104.0.1:57906 -> 198.28.0.2:53 1 64 1 2025-11-13 04:06:16.965 00:00:00.000 UDP 28.104.0.1:37552 -> 198.28.0.2:53 1 64 1 2025-11-13 04:06:45.138 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:07:17.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51114 1 80 1 2025-11-13 04:07:17.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41098 1 109 1 2025-11-13 04:07:17.264 00:00:00.000 UDP 28.104.0.1:41098 -> 198.28.0.2:53 1 64 1 2025-11-13 04:07:17.265 00:00:00.000 UDP 28.104.0.1:51114 -> 198.28.0.2:53 1 64 1 2025-11-13 04:03:05.714 00:05:51.189 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:08:17.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55066 1 109 1 2025-11-13 04:08:17.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42796 1 80 1 2025-11-13 04:08:17.571 00:00:00.000 UDP 28.104.0.1:55066 -> 198.28.0.2:53 1 64 1 2025-11-13 04:08:17.571 00:00:00.000 UDP 28.104.0.1:42796 -> 198.28.0.2:53 1 64 1 2025-11-13 04:09:17.879 00:00:00.000 UDP 28.104.0.1:40687 -> 198.28.0.2:53 1 64 1 2025-11-13 04:09:17.879 00:00:00.000 UDP 28.104.0.1:46255 -> 198.28.0.2:53 1 64 1 2025-11-13 04:09:17.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46255 1 80 1 2025-11-13 04:09:17.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40687 1 109 1 2025-11-13 04:05:43.941 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-11-13 04:10:18.199 00:00:00.000 UDP 28.104.0.1:39243 -> 198.28.0.2:53 1 64 1 2025-11-13 04:10:18.199 00:00:00.000 UDP 28.104.0.1:39392 -> 198.28.0.2:53 1 64 1 2025-11-13 04:10:18.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39243 1 80 1 2025-11-13 04:10:18.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39392 1 109 1 2025-11-13 04:06:05.718 00:05:51.236 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:06:56.903 00:05:08.735 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:11:18.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47286 1 109 1 2025-11-13 04:11:18.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37826 1 80 1 2025-11-13 04:11:18.506 00:00:00.000 UDP 28.104.0.1:47286 -> 198.28.0.2:53 1 64 1 2025-11-13 04:11:18.506 00:00:00.000 UDP 28.104.0.1:37826 -> 198.28.0.2:53 1 64 1 2025-11-13 04:11:44.757 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:07:56.912 00:05:08.715 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:12:18.800 00:00:00.000 UDP 28.104.0.1:37935 -> 198.28.0.2:53 1 64 1 2025-11-13 04:12:18.800 00:00:00.000 UDP 28.104.0.1:58923 -> 198.28.0.2:53 1 64 1 2025-11-13 04:12:18.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58923 1 80 1 2025-11-13 04:12:18.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37935 1 109 1 2025-11-13 04:08:05.625 00:06:00.175 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:08:05.625 00:06:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:13:19.097 00:00:00.000 UDP 28.104.0.1:53189 -> 198.28.0.2:53 1 64 1 2025-11-13 04:13:19.097 00:00:00.000 UDP 28.104.0.1:40651 -> 198.28.0.2:53 1 64 1 2025-11-13 04:13:19.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40651 1 109 1 2025-11-13 04:13:19.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53189 1 80 1 2025-11-13 04:09:05.729 00:05:51.175 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:14:19.395 00:00:00.000 UDP 28.104.0.1:60080 -> 198.28.0.2:53 1 64 1 2025-11-13 04:14:19.395 00:00:00.000 UDP 28.104.0.1:45568 -> 198.28.0.2:53 1 64 1 2025-11-13 04:14:19.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60080 1 80 1 2025-11-13 04:14:19.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45568 1 109 1 2025-11-13 04:11:03.948 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-13 04:15:19.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46065 1 80 1 2025-11-13 04:15:19.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48324 1 109 1 2025-11-13 04:15:19.700 00:00:00.000 UDP 28.104.0.1:48324 -> 198.28.0.2:53 1 64 1 2025-11-13 04:15:19.700 00:00:00.000 UDP 28.104.0.1:46065 -> 198.28.0.2:53 1 64 1 2025-11-13 04:16:19.988 00:00:00.000 UDP 28.104.0.1:41039 -> 198.28.0.2:53 1 64 1 2025-11-13 04:16:19.988 00:00:00.000 UDP 28.104.0.1:48838 -> 198.28.0.2:53 1 64 1 2025-11-13 04:16:19.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41039 1 80 1 2025-11-13 04:16:19.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48838 1 109 1 2025-11-13 04:16:44.969 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:12:05.720 00:05:51.235 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:12:56.902 00:05:08.737 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:17:20.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59501 1 80 1 2025-11-13 04:17:20.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49113 1 109 1 2025-11-13 04:17:20.288 00:00:00.000 UDP 28.104.0.1:49113 -> 198.28.0.2:53 1 64 1 2025-11-13 04:17:20.288 00:00:00.000 UDP 28.104.0.1:59501 -> 198.28.0.2:53 1 64 1 2025-11-13 04:13:56.913 00:05:08.717 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:18:20.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55398 1 80 1 2025-11-13 04:18:20.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59431 1 109 1 2025-11-13 04:18:20.589 00:00:00.000 UDP 28.104.0.1:55398 -> 198.28.0.2:53 1 64 1 2025-11-13 04:18:20.589 00:00:00.000 UDP 28.104.0.1:59431 -> 198.28.0.2:53 1 64 1 2025-11-13 04:19:20.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52402 1 109 1 2025-11-13 04:19:20.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39553 1 80 1 2025-11-13 04:19:20.889 00:00:00.000 UDP 28.104.0.1:39553 -> 198.28.0.2:53 1 64 1 2025-11-13 04:19:20.889 00:00:00.000 UDP 28.104.0.1:52402 -> 198.28.0.2:53 1 64 1 2025-11-13 04:15:05.729 00:05:51.175 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:15:05.629 00:06:00.184 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:15:05.629 00:06:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:20:21.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34182 1 109 1 2025-11-13 04:20:21.219 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56393 1 80 1 2025-11-13 04:20:21.208 00:00:00.000 UDP 28.104.0.1:56393 -> 198.28.0.2:53 1 64 1 2025-11-13 04:20:21.208 00:00:00.000 UDP 28.104.0.1:34182 -> 198.28.0.2:53 1 64 1 2025-11-13 04:16:23.954 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2360 1 2025-11-13 04:21:21.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44388 1 109 1 2025-11-13 04:21:21.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38418 1 80 1 2025-11-13 04:21:21.504 00:00:00.000 UDP 28.104.0.1:44388 -> 198.28.0.2:53 1 64 1 2025-11-13 04:21:21.504 00:00:00.000 UDP 28.104.0.1:38418 -> 198.28.0.2:53 1 64 1 2025-11-13 04:21:45.127 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:22:21.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59036 1 109 1 2025-11-13 04:22:21.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32888 1 80 1 2025-11-13 04:22:21.811 00:00:00.000 UDP 28.104.0.1:59036 -> 198.28.0.2:53 1 64 1 2025-11-13 04:22:21.811 00:00:00.000 UDP 28.104.0.1:32888 -> 198.28.0.2:53 1 64 1 2025-11-13 04:18:05.720 00:05:51.235 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:18:56.905 00:05:08.736 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:23:22.109 00:00:00.000 UDP 28.104.0.1:44034 -> 198.28.0.2:53 1 64 1 2025-11-13 04:23:22.109 00:00:00.000 UDP 28.104.0.1:40244 -> 198.28.0.2:53 1 64 1 2025-11-13 04:23:22.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44034 1 80 1 2025-11-13 04:23:22.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40244 1 109 1 2025-11-13 04:19:56.915 00:05:08.716 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:24:22.405 00:00:00.000 UDP 28.104.0.1:53584 -> 198.28.0.2:53 1 64 1 2025-11-13 04:24:22.405 00:00:00.000 UDP 28.104.0.1:60901 -> 198.28.0.2:53 1 64 1 2025-11-13 04:24:22.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53584 1 109 1 2025-11-13 04:24:22.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60901 1 80 1 2025-11-13 04:25:22.755 00:00:00.000 UDP 28.104.0.1:60829 -> 198.28.0.2:53 1 64 1 2025-11-13 04:25:22.755 00:00:00.000 UDP 28.104.0.1:53879 -> 198.28.0.2:53 1 64 1 2025-11-13 04:25:22.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60829 1 80 1 2025-11-13 04:25:22.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53879 1 109 1 2025-11-13 04:21:05.738 00:05:51.167 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:21:43.964 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2812 1 2025-11-13 04:26:23.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53775 1 109 1 2025-11-13 04:26:23.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38466 1 80 1 2025-11-13 04:26:23.052 00:00:00.000 UDP 28.104.0.1:53775 -> 198.28.0.2:53 1 64 1 2025-11-13 04:26:23.052 00:00:00.000 UDP 28.104.0.1:38466 -> 198.28.0.2:53 1 64 1 2025-11-13 04:26:45.191 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:22:05.631 00:06:00.184 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:22:05.631 00:06:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:27:23.355 00:00:00.000 UDP 28.104.0.1:55087 -> 198.28.0.2:53 1 64 1 2025-11-13 04:27:23.355 00:00:00.000 UDP 28.104.0.1:34364 -> 198.28.0.2:53 1 64 1 2025-11-13 04:27:23.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34364 1 109 1 2025-11-13 04:27:23.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55087 1 80 1 2025-11-13 04:28:23.673 00:00:00.000 UDP 28.104.0.1:52428 -> 198.28.0.2:53 1 64 1 2025-11-13 04:28:23.673 00:00:00.000 UDP 28.104.0.1:56115 -> 198.28.0.2:53 1 64 1 2025-11-13 04:28:23.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56115 1 80 1 2025-11-13 04:28:23.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52428 1 109 1 2025-11-13 04:24:05.731 00:05:51.225 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:24:56.905 00:05:08.736 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:29:23.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35147 1 109 1 2025-11-13 04:29:23.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51339 1 80 1 2025-11-13 04:29:23.967 00:00:00.000 UDP 28.104.0.1:51339 -> 198.28.0.2:53 1 64 1 2025-11-13 04:29:23.967 00:00:00.000 UDP 28.104.0.1:35147 -> 198.28.0.2:53 1 64 1 2025-11-13 04:25:56.915 00:05:08.716 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:30:24.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33807 1 109 1 2025-11-13 04:30:24.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53782 1 80 1 2025-11-13 04:30:24.265 00:00:00.000 UDP 28.104.0.1:53782 -> 198.28.0.2:53 1 64 1 2025-11-13 04:30:24.265 00:00:00.000 UDP 28.104.0.1:33807 -> 198.28.0.2:53 1 64 1 2025-11-13 04:27:03.970 00:05:00.067 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2816 1 2025-11-13 04:31:24.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60226 1 109 1 2025-11-13 04:31:24.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34046 1 80 1 2025-11-13 04:31:24.559 00:00:00.000 UDP 28.104.0.1:34046 -> 198.28.0.2:53 1 64 1 2025-11-13 04:31:24.559 00:00:00.000 UDP 28.104.0.1:60226 -> 198.28.0.2:53 1 64 1 2025-11-13 04:31:45.431 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:27:05.741 00:05:51.169 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:32:25.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56735 1 80 1 2025-11-13 04:32:25.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52842 1 109 1 2025-11-13 04:32:25.096 00:00:00.000 UDP 28.104.0.1:56735 -> 198.28.0.2:53 1 64 1 2025-11-13 04:32:25.097 00:00:00.000 UDP 28.104.0.1:52842 -> 198.28.0.2:53 1 64 1 2025-11-13 04:33:25.392 00:00:00.000 UDP 28.104.0.1:56623 -> 198.28.0.2:53 1 64 1 2025-11-13 04:33:25.392 00:00:00.000 UDP 28.104.0.1:36695 -> 198.28.0.2:53 1 64 1 2025-11-13 04:33:25.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56623 1 80 1 2025-11-13 04:33:25.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36695 1 109 1 2025-11-13 04:29:05.632 00:06:00.185 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:29:05.632 00:06:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:34:25.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49728 1 109 1 2025-11-13 04:34:25.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45367 1 80 1 2025-11-13 04:34:25.749 00:00:00.000 UDP 28.104.0.1:45367 -> 198.28.0.2:53 1 64 1 2025-11-13 04:34:25.749 00:00:00.000 UDP 28.104.0.1:49728 -> 198.28.0.2:53 1 64 1 2025-11-13 04:30:05.734 00:05:51.228 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:30:56.911 00:05:08.735 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:35:26.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50881 1 80 1 2025-11-13 04:35:26.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41834 1 109 1 2025-11-13 04:35:26.058 00:00:00.000 UDP 28.104.0.1:41834 -> 198.28.0.2:53 1 64 1 2025-11-13 04:35:26.058 00:00:00.000 UDP 28.104.0.1:50881 -> 198.28.0.2:53 1 64 1 2025-11-13 04:31:56.921 00:05:08.712 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:36:26.354 00:00:00.000 UDP 28.104.0.1:54369 -> 198.28.0.2:53 1 64 1 2025-11-13 04:32:13.976 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-13 04:36:26.353 00:00:00.000 UDP 28.104.0.1:37163 -> 198.28.0.2:53 1 64 1 2025-11-13 04:36:26.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37163 1 80 1 2025-11-13 04:36:26.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54369 1 109 1 2025-11-13 04:36:45.482 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:37:26.651 00:00:00.000 UDP 28.104.0.1:54044 -> 198.28.0.2:53 1 64 1 2025-11-13 04:37:26.651 00:00:00.000 UDP 28.104.0.1:38357 -> 198.28.0.2:53 1 64 1 2025-11-13 04:37:26.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54044 1 109 1 2025-11-13 04:37:26.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38357 1 80 1 2025-11-13 04:33:05.745 00:05:51.168 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:38:26.950 00:00:00.000 UDP 28.104.0.1:33295 -> 198.28.0.2:53 1 64 1 2025-11-13 04:38:26.950 00:00:00.000 UDP 28.104.0.1:50447 -> 198.28.0.2:53 1 64 1 2025-11-13 04:38:26.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50447 1 80 1 2025-11-13 04:38:26.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33295 1 109 1 2025-11-13 04:39:27.251 00:00:00.000 UDP 28.104.0.1:37532 -> 198.28.0.2:53 1 64 1 2025-11-13 04:39:27.251 00:00:00.000 UDP 28.104.0.1:42540 -> 198.28.0.2:53 1 64 1 2025-11-13 04:39:27.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42540 1 109 1 2025-11-13 04:39:27.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37532 1 80 1 2025-11-13 04:40:27.547 00:00:00.000 UDP 28.104.0.1:45349 -> 198.28.0.2:53 1 64 1 2025-11-13 04:40:27.547 00:00:00.000 UDP 28.104.0.1:40575 -> 198.28.0.2:53 1 64 1 2025-11-13 04:40:27.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40575 1 80 1 2025-11-13 04:40:27.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45349 1 109 1 2025-11-13 04:36:05.734 00:05:51.227 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:36:05.632 00:06:00.186 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:36:05.632 00:06:00.162 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:36:56.913 00:05:08.731 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:41:27.840 00:00:00.000 UDP 28.104.0.1:53624 -> 198.28.0.2:53 1 64 1 2025-11-13 04:41:27.840 00:00:00.000 UDP 28.104.0.1:53584 -> 198.28.0.2:53 1 64 1 2025-11-13 04:41:27.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53624 1 80 1 2025-11-13 04:41:27.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53584 1 109 1 2025-11-13 04:37:33.981 00:05:10.014 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-13 04:41:45.376 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:37:56.921 00:05:08.712 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:42:28.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35912 1 109 1 2025-11-13 04:42:28.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40584 1 80 1 2025-11-13 04:42:28.098 00:00:00.000 UDP 28.104.0.1:35912 -> 198.28.0.2:53 1 64 1 2025-11-13 04:42:28.098 00:00:00.000 UDP 28.104.0.1:40584 -> 198.28.0.2:53 1 64 1 2025-11-13 04:43:28.352 00:00:00.000 UDP 28.104.0.1:49385 -> 198.28.0.2:53 1 64 1 2025-11-13 04:43:28.352 00:00:00.000 UDP 28.104.0.1:42718 -> 198.28.0.2:53 1 64 1 2025-11-13 04:43:28.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49385 1 80 1 2025-11-13 04:43:28.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42718 1 109 1 2025-11-13 04:39:05.745 00:05:51.166 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:44:28.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45677 1 80 1 2025-11-13 04:44:28.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40413 1 109 1 2025-11-13 04:44:28.642 00:00:00.000 UDP 28.104.0.1:40413 -> 198.28.0.2:53 1 64 1 2025-11-13 04:44:28.642 00:00:00.000 UDP 28.104.0.1:45677 -> 198.28.0.2:53 1 64 1 2025-11-13 04:45:29.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47425 1 109 1 2025-11-13 04:45:29.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45764 1 80 1 2025-11-13 04:45:29.437 00:00:00.000 UDP 28.104.0.1:45764 -> 198.28.0.2:53 1 64 1 2025-11-13 04:45:29.437 00:00:00.000 UDP 28.104.0.1:47425 -> 198.28.0.2:53 1 64 1 2025-11-13 04:46:29.724 00:00:00.000 UDP 28.104.0.1:45069 -> 198.28.0.2:53 1 64 1 2025-11-13 04:46:29.724 00:00:00.000 UDP 28.104.0.1:56274 -> 198.28.0.2:53 1 64 1 2025-11-13 04:46:29.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45069 1 80 1 2025-11-13 04:46:29.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56274 1 109 1 2025-11-13 04:46:45.561 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:42:05.735 00:05:51.226 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:42:53.994 00:05:00.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2372 1 2025-11-13 04:42:56.912 00:05:08.735 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:47:30.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52838 1 80 1 2025-11-13 04:47:30.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38060 1 109 1 2025-11-13 04:47:30.049 00:00:00.000 UDP 28.104.0.1:38060 -> 198.28.0.2:53 1 64 1 2025-11-13 04:47:30.049 00:00:00.000 UDP 28.104.0.1:52838 -> 198.28.0.2:53 1 64 1 2025-11-13 04:43:05.634 00:06:00.188 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:43:56.922 00:05:08.716 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:43:05.634 00:06:00.163 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:48:30.343 00:00:00.000 UDP 28.104.0.1:46687 -> 198.28.0.2:53 1 64 1 2025-11-13 04:48:30.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46687 1 109 1 2025-11-13 04:49:30.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46978 1 109 1 2025-11-13 04:48:30.354 00:01:00.319 UDP 198.28.0.2:53 -> 28.104.0.1:37285 2 160 1 2025-11-13 04:49:30.662 00:00:00.000 UDP 28.104.0.1:46978 -> 198.28.0.2:53 1 64 1 2025-11-13 04:48:30.342 00:01:00.320 UDP 28.104.0.1:37285 -> 198.28.0.2:53 2 128 1 2025-11-13 04:45:05.745 00:05:51.166 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:50:30.952 00:00:00.000 UDP 28.104.0.1:55736 -> 198.28.0.2:53 1 64 1 2025-11-13 04:50:30.952 00:00:00.000 UDP 28.104.0.1:48616 -> 198.28.0.2:53 1 64 1 2025-11-13 04:50:30.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55736 1 80 1 2025-11-13 04:50:30.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48616 1 109 1 2025-11-13 04:51:31.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40705 1 109 1 2025-11-13 04:51:31.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33986 1 80 1 2025-11-13 04:51:31.267 00:00:00.000 UDP 28.104.0.1:40705 -> 198.28.0.2:53 1 64 1 2025-11-13 04:51:31.267 00:00:00.000 UDP 28.104.0.1:33986 -> 198.28.0.2:53 1 64 1 2025-11-13 04:51:45.581 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:48:04.008 00:05:10.045 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2500 1 2025-11-13 04:52:31.541 00:00:00.000 UDP 28.104.0.1:45799 -> 198.28.0.2:53 1 64 1 2025-11-13 04:52:31.541 00:00:00.000 UDP 28.104.0.1:46879 -> 198.28.0.2:53 1 64 1 2025-11-13 04:52:31.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45799 1 109 1 2025-11-13 04:52:31.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46879 1 80 1 2025-11-13 04:48:05.738 00:05:51.226 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:48:56.916 00:05:08.733 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:53:31.797 00:00:00.000 UDP 28.104.0.1:34625 -> 198.28.0.2:53 1 64 1 2025-11-13 04:53:31.797 00:00:00.000 UDP 28.104.0.1:34337 -> 198.28.0.2:53 1 64 1 2025-11-13 04:53:31.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34625 1 109 1 2025-11-13 04:53:31.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34337 1 80 1 2025-11-13 04:49:56.923 00:05:08.717 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:54:32.052 00:00:00.000 UDP 28.104.0.1:58115 -> 198.28.0.2:53 1 64 1 2025-11-13 04:54:32.052 00:00:00.000 UDP 28.104.0.1:42629 -> 198.28.0.2:53 1 64 1 2025-11-13 04:54:32.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58115 1 80 1 2025-11-13 04:54:32.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42629 1 109 1 2025-11-13 04:50:05.638 00:06:00.184 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:50:05.638 00:06:00.162 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:55:32.349 00:00:00.000 UDP 28.104.0.1:58056 -> 198.28.0.2:53 1 64 1 2025-11-13 04:55:32.349 00:00:00.000 UDP 28.104.0.1:41319 -> 198.28.0.2:53 1 64 1 2025-11-13 04:55:32.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58056 1 80 1 2025-11-13 04:55:32.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41319 1 109 1 2025-11-13 04:51:05.747 00:05:51.166 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:56:32.643 00:00:00.000 UDP 28.104.0.1:57885 -> 198.28.0.2:53 1 64 1 2025-11-13 04:56:32.643 00:00:00.000 UDP 28.104.0.1:48291 -> 198.28.0.2:53 1 64 1 2025-11-13 04:56:32.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57885 1 80 1 2025-11-13 04:56:32.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48291 1 109 1 2025-11-13 04:56:45.775 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:57:32.936 00:00:00.000 UDP 28.104.0.1:40408 -> 198.28.0.2:53 1 64 1 2025-11-13 04:57:32.936 00:00:00.000 UDP 28.104.0.1:48877 -> 198.28.0.2:53 1 64 1 2025-11-13 04:57:32.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48877 1 109 1 2025-11-13 04:57:32.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40408 1 80 1 2025-11-13 04:53:24.054 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 41 2996 1 2025-11-13 04:58:33.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45669 1 80 1 2025-11-13 04:58:33.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47133 1 109 1 2025-11-13 04:58:33.252 00:00:00.000 UDP 28.104.0.1:47133 -> 198.28.0.2:53 1 64 1 2025-11-13 04:58:33.252 00:00:00.000 UDP 28.104.0.1:45669 -> 198.28.0.2:53 1 64 1 Summary: total flows: 320, total bytes: 98138, total packets: 1444, avg bps: 202, avg pps: 0, avg bpp: 67 Time window: 2025-11-13 03:54:05 - 2025-11-13 04:58:34 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0053s User: 0.0026s Wall: 0.0042s flows/second: 76555.9 Runtime: 0.0042s