Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 05:54:05.760 00:05:51.244 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 05:59:13.623 00:00:00.000 UDP 28.104.0.1:57501 -> 198.28.0.2:53 1 64 1 2025-11-13 05:59:13.623 00:00:00.000 UDP 28.104.0.1:55402 -> 198.28.0.2:53 1 64 1 2025-11-13 05:54:56.952 00:05:08.738 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 05:59:13.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55402 1 109 1 2025-11-13 05:59:13.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57501 1 80 1 2025-11-13 05:55:56.960 00:05:08.722 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 06:00:13.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59274 1 80 1 2025-11-13 06:00:13.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46323 1 109 1 2025-11-13 06:00:13.913 00:00:00.000 UDP 28.104.0.1:59274 -> 198.28.0.2:53 1 64 1 2025-11-13 06:00:13.913 00:00:00.000 UDP 28.104.0.1:46323 -> 198.28.0.2:53 1 64 1 2025-11-13 06:01:14.231 00:00:00.000 UDP 28.104.0.1:37791 -> 198.28.0.2:53 1 64 1 2025-11-13 06:01:14.232 00:00:00.000 UDP 28.104.0.1:54948 -> 198.28.0.2:53 1 64 1 2025-11-13 06:01:14.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54948 1 109 1 2025-11-13 06:01:14.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37791 1 80 1 2025-11-13 05:57:24.125 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2696 1 2025-11-13 06:01:47.166 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 05:57:05.771 00:05:51.183 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 06:02:14.537 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43608 1 109 1 2025-11-13 06:02:14.537 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46056 1 80 1 2025-11-13 06:02:14.527 00:00:00.000 UDP 28.104.0.1:46056 -> 198.28.0.2:53 1 64 1 2025-11-13 06:02:14.527 00:00:00.000 UDP 28.104.0.1:43608 -> 198.28.0.2:53 1 64 1 2025-11-13 06:03:14.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40311 1 109 1 2025-11-13 06:03:14.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43653 1 80 1 2025-11-13 06:03:14.824 00:00:00.000 UDP 28.104.0.1:43653 -> 198.28.0.2:53 1 64 1 2025-11-13 06:03:14.824 00:00:00.000 UDP 28.104.0.1:40311 -> 198.28.0.2:53 1 64 1 2025-11-13 06:04:15.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35227 1 109 1 2025-11-13 06:04:15.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58409 1 80 1 2025-11-13 06:04:15.084 00:00:00.000 UDP 28.104.0.1:58409 -> 198.28.0.2:53 1 64 1 2025-11-13 06:04:15.084 00:00:00.000 UDP 28.104.0.1:35227 -> 198.28.0.2:53 1 64 1 2025-11-13 06:00:05.762 00:05:51.244 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 06:00:05.680 00:06:00.159 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 06:00:05.680 00:06:00.152 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 06:00:56.953 00:05:08.738 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 06:05:15.406 00:00:00.000 UDP 28.104.0.1:48912 -> 198.28.0.2:53 1 64 1 2025-11-13 06:05:15.406 00:00:00.000 UDP 28.104.0.1:48840 -> 198.28.0.2:53 1 64 1 2025-11-13 06:05:15.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48840 1 109 1 2025-11-13 06:05:15.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48912 1 80 1 2025-11-13 06:01:56.963 00:05:08.717 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 06:06:15.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40150 1 80 1 2025-11-13 06:06:15.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46397 1 109 1 2025-11-13 06:06:15.681 00:00:00.000 UDP 28.104.0.1:46397 -> 198.28.0.2:53 1 64 1 2025-11-13 06:06:15.681 00:00:00.000 UDP 28.104.0.1:40150 -> 198.28.0.2:53 1 64 1 2025-11-13 06:06:47.232 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:02:44.128 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-13 06:07:15.968 00:00:00.000 UDP 28.104.0.1:47279 -> 198.28.0.2:53 1 64 1 2025-11-13 06:07:15.968 00:00:00.000 UDP 28.104.0.1:35866 -> 198.28.0.2:53 1 64 1 2025-11-13 06:07:15.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47279 1 109 1 2025-11-13 06:07:15.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35866 1 80 1 2025-11-13 06:03:05.772 00:05:51.182 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 06:08:16.264 00:00:00.000 UDP 28.104.0.1:42215 -> 198.28.0.2:53 1 64 1 2025-11-13 06:08:16.264 00:00:00.000 UDP 28.104.0.1:47115 -> 198.28.0.2:53 1 64 1 2025-11-13 06:08:16.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47115 1 80 1 2025-11-13 06:08:16.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42215 1 109 1 2025-11-13 06:09:16.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56885 1 80 1 2025-11-13 06:09:16.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48191 1 109 1 2025-11-13 06:09:16.555 00:00:00.000 UDP 28.104.0.1:48191 -> 198.28.0.2:53 1 64 1 2025-11-13 06:09:16.555 00:00:00.000 UDP 28.104.0.1:56885 -> 198.28.0.2:53 1 64 1 2025-11-13 06:10:17.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58943 1 80 1 2025-11-13 06:10:17.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39924 1 109 1 2025-11-13 06:10:17.374 00:00:00.000 UDP 28.104.0.1:58943 -> 198.28.0.2:53 1 64 1 2025-11-13 06:10:17.374 00:00:00.000 UDP 28.104.0.1:39924 -> 198.28.0.2:53 1 64 1 2025-11-13 06:06:05.762 00:05:51.245 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 06:06:56.954 00:05:08.741 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 06:11:17.672 00:00:00.000 UDP 28.104.0.1:55514 -> 198.28.0.2:53 1 64 1 2025-11-13 06:11:17.672 00:00:00.000 UDP 28.104.0.1:38826 -> 198.28.0.2:53 1 64 1 2025-11-13 06:11:17.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38826 1 109 1 2025-11-13 06:11:17.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55514 1 80 1 2025-11-13 06:11:47.331 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:07:05.680 00:06:00.160 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 06:07:56.964 00:05:08.721 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 06:07:05.680 00:06:00.153 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 06:08:04.131 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-13 06:12:17.984 00:00:00.000 UDP 28.104.0.1:39014 -> 198.28.0.2:53 1 64 1 2025-11-13 06:12:17.984 00:00:00.000 UDP 28.104.0.1:52769 -> 198.28.0.2:53 1 64 1 2025-11-13 06:12:17.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39014 1 80 1 2025-11-13 06:12:17.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52769 1 109 1 2025-11-13 06:13:19.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36194 1 80 1 2025-11-13 06:13:19.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49843 1 109 1 2025-11-13 06:13:19.350 00:00:00.000 UDP 28.104.0.1:49843 -> 198.28.0.2:53 1 64 1 2025-11-13 06:13:19.350 00:00:00.000 UDP 28.104.0.1:36194 -> 198.28.0.2:53 1 64 1 2025-11-13 06:09:05.774 00:05:51.183 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 06:14:19.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42814 1 109 1 2025-11-13 06:14:19.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54621 1 80 1 2025-11-13 06:14:19.609 00:00:00.000 UDP 28.104.0.1:54621 -> 198.28.0.2:53 1 64 1 2025-11-13 06:14:19.610 00:00:00.000 UDP 28.104.0.1:42814 -> 198.28.0.2:53 1 64 1 2025-11-13 06:15:19.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47565 1 80 1 2025-11-13 06:15:19.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36295 1 109 1 2025-11-13 06:15:19.906 00:00:00.000 UDP 28.104.0.1:36295 -> 198.28.0.2:53 1 64 1 2025-11-13 06:15:19.905 00:00:00.000 UDP 28.104.0.1:47565 -> 198.28.0.2:53 1 64 1 2025-11-13 06:16:20.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35643 1 109 1 2025-11-13 06:16:20.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42380 1 80 1 2025-11-13 06:16:20.242 00:00:00.000 UDP 28.104.0.1:42380 -> 198.28.0.2:53 1 64 1 2025-11-13 06:16:20.244 00:00:00.000 UDP 28.104.0.1:35643 -> 198.28.0.2:53 1 64 1 2025-11-13 06:16:47.897 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:12:05.764 00:05:51.244 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 06:12:56.955 00:05:08.741 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 06:17:20.565 00:00:00.000 UDP 28.104.0.1:52665 -> 198.28.0.2:53 1 64 1 2025-11-13 06:17:20.565 00:00:00.000 UDP 28.104.0.1:49196 -> 198.28.0.2:53 1 64 1 2025-11-13 06:17:20.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49196 1 109 1 2025-11-13 06:17:20.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52665 1 80 1 2025-11-13 06:13:24.138 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2564 1 2025-11-13 06:13:56.966 00:05:08.720 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 06:18:20.854 00:00:00.000 UDP 28.104.0.1:41484 -> 198.28.0.2:53 1 64 1 2025-11-13 06:18:20.855 00:00:00.000 UDP 28.104.0.1:58484 -> 198.28.0.2:53 1 64 1 2025-11-13 06:18:20.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58484 1 80 1 2025-11-13 06:18:20.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41484 1 109 1 2025-11-13 06:14:05.687 00:06:00.156 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 06:14:05.686 00:06:00.150 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 06:19:21.181 00:00:00.000 UDP 28.104.0.1:50355 -> 198.28.0.2:53 1 64 1 2025-11-13 06:19:21.182 00:00:00.000 UDP 28.104.0.1:37225 -> 198.28.0.2:53 1 64 1 2025-11-13 06:19:21.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37225 1 109 1 2025-11-13 06:19:21.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50355 1 80 1 2025-11-13 06:15:05.776 00:05:51.183 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 06:20:21.456 00:00:00.000 UDP 28.104.0.1:45007 -> 198.28.0.2:53 1 64 1 2025-11-13 06:20:21.456 00:00:00.000 UDP 28.104.0.1:51636 -> 198.28.0.2:53 1 64 1 2025-11-13 06:20:21.466 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45007 1 109 1 2025-11-13 06:20:21.466 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51636 1 80 1 2025-11-13 06:21:21.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48567 1 80 1 2025-11-13 06:21:21.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54260 1 109 1 2025-11-13 06:21:21.761 00:00:00.000 UDP 28.104.0.1:54260 -> 198.28.0.2:53 1 64 1 2025-11-13 06:21:21.761 00:00:00.000 UDP 28.104.0.1:48567 -> 198.28.0.2:53 1 64 1 2025-11-13 06:21:47.521 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:22:22.071 00:00:00.000 UDP 28.104.0.1:39849 -> 198.28.0.2:53 1 64 1 2025-11-13 06:22:22.071 00:00:00.000 UDP 28.104.0.1:48100 -> 198.28.0.2:53 1 64 1 2025-11-13 06:22:22.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39849 1 80 1 2025-11-13 06:22:22.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48100 1 109 1 2025-11-13 06:18:05.765 00:05:51.244 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 06:18:44.144 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2900 1 2025-11-13 06:18:56.957 00:05:08.740 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 06:23:23.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52139 1 109 1 2025-11-13 06:23:23.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53276 1 80 1 2025-11-13 06:23:23.005 00:00:00.000 UDP 28.104.0.1:52139 -> 198.28.0.2:53 1 64 1 2025-11-13 06:23:23.004 00:00:00.000 UDP 28.104.0.1:53276 -> 198.28.0.2:53 1 64 1 2025-11-13 06:19:56.969 00:05:08.721 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 06:24:23.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53367 1 109 1 2025-11-13 06:24:23.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39343 1 80 1 2025-11-13 06:24:23.312 00:00:00.000 UDP 28.104.0.1:39343 -> 198.28.0.2:53 1 64 1 2025-11-13 06:24:23.313 00:00:00.000 UDP 28.104.0.1:53367 -> 198.28.0.2:53 1 64 1 2025-11-13 06:25:23.612 00:00:00.000 UDP 28.104.0.1:56515 -> 198.28.0.2:53 1 64 1 2025-11-13 06:25:23.612 00:00:00.000 UDP 28.104.0.1:47491 -> 198.28.0.2:53 1 64 1 2025-11-13 06:25:23.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47491 1 80 1 2025-11-13 06:25:23.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56515 1 109 1 2025-11-13 06:21:05.777 00:05:51.182 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 06:21:05.687 00:06:00.176 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 06:21:05.687 00:06:00.151 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 06:26:23.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46896 1 109 1 2025-11-13 06:26:23.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46816 1 80 1 2025-11-13 06:26:23.906 00:00:00.000 UDP 28.104.0.1:46896 -> 198.28.0.2:53 1 64 1 2025-11-13 06:26:23.906 00:00:00.000 UDP 28.104.0.1:46816 -> 198.28.0.2:53 1 64 1 2025-11-13 06:26:47.595 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:27:24.160 00:00:00.000 UDP 28.104.0.1:48725 -> 198.28.0.2:53 1 64 1 2025-11-13 06:27:24.160 00:00:00.000 UDP 28.104.0.1:37764 -> 198.28.0.2:53 1 64 1 2025-11-13 06:27:24.169 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48725 1 80 1 2025-11-13 06:27:24.169 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37764 1 109 1 2025-11-13 06:24:04.147 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2624 1 2025-11-13 06:28:24.452 00:00:00.000 UDP 28.104.0.1:51102 -> 198.28.0.2:53 1 64 1 2025-11-13 06:28:24.452 00:00:00.000 UDP 28.104.0.1:60786 -> 198.28.0.2:53 1 64 1 2025-11-13 06:28:24.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60786 1 109 1 2025-11-13 06:28:24.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51102 1 80 1 2025-11-13 06:24:05.768 00:05:51.245 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 06:24:56.959 00:05:08.741 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 06:29:24.740 00:00:00.000 UDP 28.104.0.1:38042 -> 198.28.0.2:53 1 64 1 2025-11-13 06:29:24.740 00:00:00.000 UDP 28.104.0.1:44487 -> 198.28.0.2:53 1 64 1 2025-11-13 06:29:24.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38042 1 109 1 2025-11-13 06:29:24.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44487 1 80 1 2025-11-13 06:25:56.968 00:05:08.721 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 06:30:25.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34014 1 80 1 2025-11-13 06:30:25.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42051 1 109 1 2025-11-13 06:30:25.051 00:00:00.000 UDP 28.104.0.1:42051 -> 198.28.0.2:53 1 64 1 2025-11-13 06:30:25.051 00:00:00.000 UDP 28.104.0.1:34014 -> 198.28.0.2:53 1 64 1 2025-11-13 06:31:25.347 00:00:00.000 UDP 28.104.0.1:36212 -> 198.28.0.2:53 1 64 1 2025-11-13 06:31:25.347 00:00:00.000 UDP 28.104.0.1:59884 -> 198.28.0.2:53 1 64 1 2025-11-13 06:31:25.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59884 1 109 1 2025-11-13 06:31:25.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36212 1 80 1 2025-11-13 06:31:47.676 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:27:05.778 00:05:51.183 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 06:32:25.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60987 1 109 1 2025-11-13 06:32:25.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56095 1 80 1 2025-11-13 06:32:25.647 00:00:00.000 UDP 28.104.0.1:56095 -> 198.28.0.2:53 1 64 1 2025-11-13 06:32:25.647 00:00:00.000 UDP 28.104.0.1:60987 -> 198.28.0.2:53 1 64 1 2025-11-13 06:28:05.692 00:06:00.176 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 06:28:05.692 00:06:00.148 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 06:33:25.945 00:00:00.000 UDP 28.104.0.1:43100 -> 198.28.0.2:53 1 64 1 2025-11-13 06:33:25.945 00:00:00.000 UDP 28.104.0.1:45678 -> 198.28.0.2:53 1 64 1 2025-11-13 06:33:25.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45678 1 80 1 2025-11-13 06:33:25.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43100 1 109 1 2025-11-13 06:29:24.154 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-11-13 06:34:26.257 00:00:00.000 UDP 28.104.0.1:50080 -> 198.28.0.2:53 1 64 1 2025-11-13 06:34:26.257 00:00:00.000 UDP 28.104.0.1:42400 -> 198.28.0.2:53 1 64 1 2025-11-13 06:34:26.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42400 1 80 1 2025-11-13 06:34:26.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50080 1 109 1 2025-11-13 06:30:05.768 00:05:51.246 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 06:30:56.961 00:05:08.748 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 06:35:26.513 00:00:00.000 UDP 28.104.0.1:47198 -> 198.28.0.2:53 1 64 1 2025-11-13 06:35:26.513 00:00:00.000 UDP 28.104.0.1:60754 -> 198.28.0.2:53 1 64 1 2025-11-13 06:35:26.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47198 1 80 1 2025-11-13 06:35:26.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60754 1 109 1 2025-11-13 06:31:56.971 00:05:08.728 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 06:36:26.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48126 1 80 1 2025-11-13 06:36:26.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57886 1 109 1 2025-11-13 06:36:26.803 00:00:00.000 UDP 28.104.0.1:57886 -> 198.28.0.2:53 1 64 1 2025-11-13 06:36:26.803 00:00:00.000 UDP 28.104.0.1:48126 -> 198.28.0.2:53 1 64 1 2025-11-13 06:36:48.044 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:37:27.101 00:00:00.000 UDP 28.104.0.1:47287 -> 198.28.0.2:53 1 64 1 2025-11-13 06:37:27.101 00:00:00.000 UDP 28.104.0.1:40207 -> 198.28.0.2:53 1 64 1 2025-11-13 06:37:27.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40207 1 109 1 2025-11-13 06:37:27.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47287 1 80 1 2025-11-13 06:33:05.779 00:05:51.184 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 06:38:27.402 00:00:00.000 UDP 28.104.0.1:34025 -> 198.28.0.2:53 1 64 1 2025-11-13 06:38:27.401 00:00:00.000 UDP 28.104.0.1:52882 -> 198.28.0.2:53 1 64 1 2025-11-13 06:38:27.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52882 1 109 1 2025-11-13 06:38:27.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34025 1 80 1 2025-11-13 06:34:44.159 00:05:10.070 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-11-13 06:39:27.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59957 1 80 1 2025-11-13 06:39:27.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56912 1 109 1 2025-11-13 06:39:27.699 00:00:00.000 UDP 28.104.0.1:59957 -> 198.28.0.2:53 1 64 1 2025-11-13 06:39:27.699 00:00:00.000 UDP 28.104.0.1:56912 -> 198.28.0.2:53 1 64 1 2025-11-13 06:35:05.699 00:06:00.171 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 06:35:05.699 00:06:00.143 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 06:40:28.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40713 1 109 1 2025-11-13 06:40:28.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59701 1 80 1 2025-11-13 06:40:28.051 00:00:00.000 UDP 28.104.0.1:59701 -> 198.28.0.2:53 1 64 1 2025-11-13 06:40:28.051 00:00:00.000 UDP 28.104.0.1:40713 -> 198.28.0.2:53 1 64 1 2025-11-13 06:36:05.775 00:05:51.239 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 06:36:56.963 00:05:08.747 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 06:41:28.350 00:00:00.000 UDP 28.104.0.1:58673 -> 198.28.0.2:53 1 64 1 2025-11-13 06:41:28.350 00:00:00.000 UDP 28.104.0.1:46627 -> 198.28.0.2:53 1 64 1 2025-11-13 06:41:28.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58673 1 109 1 2025-11-13 06:41:28.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46627 1 80 1 2025-11-13 06:41:48.006 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:37:56.974 00:05:08.727 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 06:42:28.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51601 1 80 1 2025-11-13 06:42:28.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59543 1 109 1 2025-11-13 06:42:28.612 00:00:00.000 UDP 28.104.0.1:51601 -> 198.28.0.2:53 1 64 1 2025-11-13 06:42:28.612 00:00:00.000 UDP 28.104.0.1:59543 -> 198.28.0.2:53 1 64 1 2025-11-13 06:43:28.907 00:00:00.000 UDP 28.104.0.1:42948 -> 198.28.0.2:53 1 64 1 2025-11-13 06:43:28.907 00:00:00.000 UDP 28.104.0.1:35489 -> 198.28.0.2:53 1 64 1 2025-11-13 06:43:28.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35489 1 80 1 2025-11-13 06:43:28.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42948 1 109 1 2025-11-13 06:39:05.785 00:05:51.179 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 06:40:04.161 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2420 1 2025-11-13 06:44:29.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45222 1 80 1 2025-11-13 06:44:29.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56250 1 109 1 2025-11-13 06:44:29.219 00:00:00.000 UDP 28.104.0.1:56250 -> 198.28.0.2:53 1 64 1 2025-11-13 06:44:29.219 00:00:00.000 UDP 28.104.0.1:45222 -> 198.28.0.2:53 1 64 1 2025-11-13 06:45:29.518 00:00:00.000 UDP 28.104.0.1:35753 -> 198.28.0.2:53 1 64 1 2025-11-13 06:45:29.518 00:00:00.000 UDP 28.104.0.1:49353 -> 198.28.0.2:53 1 64 1 2025-11-13 06:45:29.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49353 1 109 1 2025-11-13 06:45:29.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35753 1 80 1 2025-11-13 06:46:29.811 00:00:00.000 UDP 28.104.0.1:51667 -> 198.28.0.2:53 1 64 1 2025-11-13 06:46:29.811 00:00:00.000 UDP 28.104.0.1:51895 -> 198.28.0.2:53 1 64 1 2025-11-13 06:46:29.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51667 1 109 1 2025-11-13 06:46:29.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51895 1 80 1 2025-11-13 06:46:47.945 00:00:00.028 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:42:05.774 00:05:51.242 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 06:42:56.963 00:05:08.748 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 06:42:05.700 00:06:00.172 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 06:42:05.700 00:06:00.143 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 06:47:30.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57449 1 80 1 2025-11-13 06:47:30.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52650 1 109 1 2025-11-13 06:47:30.131 00:00:00.000 UDP 28.104.0.1:57449 -> 198.28.0.2:53 1 64 1 2025-11-13 06:47:30.131 00:00:00.000 UDP 28.104.0.1:52650 -> 198.28.0.2:53 1 64 1 2025-11-13 06:43:56.975 00:05:08.730 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 06:48:30.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40593 1 109 1 2025-11-13 06:48:30.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59214 1 80 1 2025-11-13 06:48:30.432 00:00:00.000 UDP 28.104.0.1:40593 -> 198.28.0.2:53 1 64 1 2025-11-13 06:48:30.431 00:00:00.000 UDP 28.104.0.1:59214 -> 198.28.0.2:53 1 64 1 2025-11-13 06:49:30.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48683 1 109 1 2025-11-13 06:49:30.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52804 1 80 1 2025-11-13 06:49:30.683 00:00:00.000 UDP 28.104.0.1:48683 -> 198.28.0.2:53 1 64 1 2025-11-13 06:49:30.683 00:00:00.000 UDP 28.104.0.1:52804 -> 198.28.0.2:53 1 64 1 2025-11-13 06:45:24.168 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2656 1 2025-11-13 06:45:05.785 00:05:51.180 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 06:50:31.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59720 1 109 1 2025-11-13 06:50:31.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46695 1 80 1 2025-11-13 06:50:31.006 00:00:00.000 UDP 28.104.0.1:59720 -> 198.28.0.2:53 1 64 1 2025-11-13 06:50:31.006 00:00:00.000 UDP 28.104.0.1:46695 -> 198.28.0.2:53 1 64 1 2025-11-13 06:51:31.306 00:00:00.000 UDP 28.104.0.1:48502 -> 198.28.0.2:53 1 64 1 2025-11-13 06:51:31.305 00:00:00.000 UDP 28.104.0.1:53247 -> 198.28.0.2:53 1 64 1 2025-11-13 06:51:31.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48502 1 109 1 2025-11-13 06:51:31.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53247 1 80 1 2025-11-13 06:51:48.049 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:52:31.606 00:00:00.000 UDP 28.104.0.1:37659 -> 198.28.0.2:53 1 64 1 2025-11-13 06:52:31.606 00:00:00.000 UDP 28.104.0.1:34714 -> 198.28.0.2:53 1 64 1 2025-11-13 06:52:31.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37659 1 109 1 2025-11-13 06:52:31.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34714 1 80 1 2025-11-13 06:48:05.776 00:05:51.243 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 06:48:56.964 00:05:08.751 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 06:53:31.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48304 1 80 1 2025-11-13 06:53:31.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51436 1 109 1 2025-11-13 06:53:31.895 00:00:00.000 UDP 28.104.0.1:51436 -> 198.28.0.2:53 1 64 1 2025-11-13 06:53:31.895 00:00:00.000 UDP 28.104.0.1:48304 -> 198.28.0.2:53 1 64 1 2025-11-13 06:49:05.704 00:06:00.169 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 06:49:56.975 00:05:08.731 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 06:49:05.704 00:06:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 06:54:32.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45322 1 80 1 2025-11-13 06:54:32.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55444 1 109 1 2025-11-13 06:54:32.193 00:00:00.000 UDP 28.104.0.1:45322 -> 198.28.0.2:53 1 64 1 2025-11-13 06:54:32.193 00:00:00.000 UDP 28.104.0.1:55444 -> 198.28.0.2:53 1 64 1 2025-11-13 06:50:44.177 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2932 1 2025-11-13 06:55:32.493 00:00:00.000 UDP 28.104.0.1:34078 -> 198.28.0.2:53 1 64 1 2025-11-13 06:55:32.493 00:00:00.000 UDP 28.104.0.1:42481 -> 198.28.0.2:53 1 64 1 2025-11-13 06:55:32.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42481 1 109 1 2025-11-13 06:55:32.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34078 1 80 1 2025-11-13 06:51:05.786 00:05:51.183 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 06:56:32.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48784 1 80 1 2025-11-13 06:56:32.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50546 1 109 1 2025-11-13 06:56:32.757 00:00:00.000 UDP 28.104.0.1:48784 -> 198.28.0.2:53 1 64 1 2025-11-13 06:56:32.757 00:00:00.000 UDP 28.104.0.1:50546 -> 198.28.0.2:53 1 64 1 2025-11-13 06:56:48.150 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 06:57:33.044 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58385 1 80 1 2025-11-13 06:57:33.049 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39128 1 109 1 2025-11-13 06:57:33.039 00:00:00.000 UDP 28.104.0.1:39128 -> 198.28.0.2:53 1 64 1 2025-11-13 06:57:33.034 00:00:00.000 UDP 28.104.0.1:58385 -> 198.28.0.2:53 1 64 1 2025-11-13 06:58:33.334 00:00:00.000 UDP 28.104.0.1:42147 -> 198.28.0.2:53 1 64 1 2025-11-13 06:58:33.334 00:00:00.000 UDP 28.104.0.1:49012 -> 198.28.0.2:53 1 64 1 2025-11-13 06:58:33.344 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42147 1 109 1 2025-11-13 06:58:33.344 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49012 1 80 1 Summary: total flows: 319, total bytes: 93756, total packets: 1380, avg bps: 193, avg pps: 0, avg bpp: 67 Time window: 2025-11-13 05:54:05 - 2025-11-13 06:58:33 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0056s User: 0.0019s Wall: 0.0036s flows/second: 87564.3 Runtime: 0.0037s