Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 08:54:05.774 00:05:51.225 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 08:54:05.807 00:05:51.243 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 08:59:25.693 00:00:00.000 UDP 28.104.0.1:60560 -> 198.28.0.2:53 1 64 1 2025-11-13 08:59:25.693 00:00:00.000 UDP 28.104.0.1:35353 -> 198.28.0.2:53 1 64 1 2025-11-13 08:59:25.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35353 1 109 1 2025-11-13 08:59:25.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60560 1 80 1 2025-11-13 08:55:05.765 00:06:00.166 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 08:55:57.011 00:05:08.756 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:55:05.765 00:06:00.121 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 09:00:26.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39738 1 109 1 2025-11-13 09:00:25.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55372 1 80 1 2025-11-13 09:00:25.990 00:00:00.000 UDP 28.104.0.1:39738 -> 198.28.0.2:53 1 64 1 2025-11-13 09:00:25.987 00:00:00.000 UDP 28.104.0.1:55372 -> 198.28.0.2:53 1 64 1 2025-11-13 09:01:26.288 00:00:00.000 UDP 28.104.0.1:39385 -> 198.28.0.2:53 1 64 1 2025-11-13 09:01:26.287 00:00:00.000 UDP 28.104.0.1:34497 -> 198.28.0.2:53 1 64 1 2025-11-13 09:01:26.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39385 1 109 1 2025-11-13 09:01:26.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34497 1 80 1 2025-11-13 09:01:50.577 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:57:05.831 00:05:51.171 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 09:02:26.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37091 1 80 1 2025-11-13 09:02:26.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59605 1 109 1 2025-11-13 09:02:26.579 00:00:00.000 UDP 28.104.0.1:37091 -> 198.28.0.2:53 1 64 1 2025-11-13 09:02:26.579 00:00:00.000 UDP 28.104.0.1:59605 -> 198.28.0.2:53 1 64 1 2025-11-13 08:58:44.299 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-13 09:03:26.872 00:00:00.000 UDP 28.104.0.1:47617 -> 198.28.0.2:53 1 64 1 2025-11-13 09:03:26.872 00:00:00.000 UDP 28.104.0.1:42743 -> 198.28.0.2:53 1 64 1 2025-11-13 09:03:26.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42743 1 109 1 2025-11-13 09:03:26.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47617 1 80 1 2025-11-13 09:04:27.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44531 1 109 1 2025-11-13 09:04:27.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60670 1 80 1 2025-11-13 09:04:27.183 00:00:00.000 UDP 28.104.0.1:60670 -> 198.28.0.2:53 1 64 1 2025-11-13 09:04:27.182 00:00:00.000 UDP 28.104.0.1:44531 -> 198.28.0.2:53 1 64 1 2025-11-13 09:00:05.776 00:05:51.225 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 09:00:05.822 00:05:51.228 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 09:05:27.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50254 1 109 1 2025-11-13 09:05:27.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50511 1 80 1 2025-11-13 09:05:27.445 00:00:00.000 UDP 28.104.0.1:50511 -> 198.28.0.2:53 1 64 1 2025-11-13 09:05:27.445 00:00:00.000 UDP 28.104.0.1:50254 -> 198.28.0.2:53 1 64 1 2025-11-13 09:01:57.012 00:05:08.758 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 09:06:27.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41420 1 80 1 2025-11-13 09:06:27.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36205 1 109 1 2025-11-13 09:06:27.740 00:00:00.000 UDP 28.104.0.1:36205 -> 198.28.0.2:53 1 64 1 2025-11-13 09:06:27.740 00:00:00.000 UDP 28.104.0.1:41420 -> 198.28.0.2:53 1 64 1 2025-11-13 09:06:51.179 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:02:05.765 00:06:00.168 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 09:02:05.765 00:06:00.123 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 09:07:28.055 00:00:00.000 UDP 28.104.0.1:38499 -> 198.28.0.2:53 1 64 1 2025-11-13 09:07:28.054 00:00:00.000 UDP 28.104.0.1:40914 -> 198.28.0.2:53 1 64 1 2025-11-13 09:07:28.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40914 1 80 1 2025-11-13 09:07:28.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38499 1 109 1 2025-11-13 09:03:05.833 00:05:51.169 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 09:04:04.302 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2564 1 2025-11-13 09:08:28.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44826 1 80 1 2025-11-13 09:08:28.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45878 1 109 1 2025-11-13 09:08:28.347 00:00:00.000 UDP 28.104.0.1:45878 -> 198.28.0.2:53 1 64 1 2025-11-13 09:08:28.347 00:00:00.000 UDP 28.104.0.1:44826 -> 198.28.0.2:53 1 64 1 2025-11-13 09:09:28.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41873 1 80 1 2025-11-13 09:09:28.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47001 1 109 1 2025-11-13 09:09:28.641 00:00:00.000 UDP 28.104.0.1:47001 -> 198.28.0.2:53 1 64 1 2025-11-13 09:09:28.641 00:00:00.000 UDP 28.104.0.1:41873 -> 198.28.0.2:53 1 64 1 2025-11-13 09:10:28.892 00:00:00.000 UDP 28.104.0.1:54452 -> 198.28.0.2:53 1 64 1 2025-11-13 09:10:28.892 00:00:00.000 UDP 28.104.0.1:44056 -> 198.28.0.2:53 1 64 1 2025-11-13 09:10:28.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44056 1 80 1 2025-11-13 09:10:28.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54452 1 109 1 2025-11-13 09:06:05.777 00:05:51.225 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 09:06:05.822 00:05:51.229 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 09:11:29.199 00:00:00.000 UDP 28.104.0.1:34590 -> 198.28.0.2:53 1 64 1 2025-11-13 09:11:29.199 00:00:00.000 UDP 28.104.0.1:55288 -> 198.28.0.2:53 1 64 1 2025-11-13 09:11:29.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55288 1 80 1 2025-11-13 09:11:29.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34590 1 109 1 2025-11-13 09:11:50.833 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:07:57.012 00:05:08.758 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 09:12:29.490 00:00:00.000 UDP 28.104.0.1:33787 -> 198.28.0.2:53 1 64 1 2025-11-13 09:12:29.490 00:00:00.000 UDP 28.104.0.1:58468 -> 198.28.0.2:53 1 64 1 2025-11-13 09:12:29.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58468 1 109 1 2025-11-13 09:12:29.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33787 1 80 1 2025-11-13 09:13:29.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59417 1 80 1 2025-11-13 09:13:29.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41204 1 109 1 2025-11-13 09:13:29.784 00:00:00.000 UDP 28.104.0.1:41204 -> 198.28.0.2:53 1 64 1 2025-11-13 09:13:29.784 00:00:00.000 UDP 28.104.0.1:59417 -> 198.28.0.2:53 1 64 1 2025-11-13 09:09:24.310 00:05:10.042 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2696 1 2025-11-13 09:09:05.832 00:05:51.170 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 09:09:05.768 00:06:00.168 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 09:09:05.768 00:06:00.122 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 09:14:30.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42560 1 109 1 2025-11-13 09:14:30.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58564 1 80 1 2025-11-13 09:14:30.095 00:00:00.000 UDP 28.104.0.1:58564 -> 198.28.0.2:53 1 64 1 2025-11-13 09:14:30.095 00:00:00.000 UDP 28.104.0.1:42560 -> 198.28.0.2:53 1 64 1 2025-11-13 09:15:30.388 00:00:00.000 UDP 28.104.0.1:35066 -> 198.28.0.2:53 1 64 1 2025-11-13 09:15:30.388 00:00:00.000 UDP 28.104.0.1:49830 -> 198.28.0.2:53 1 64 1 2025-11-13 09:15:30.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35066 1 109 1 2025-11-13 09:15:30.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49830 1 80 1 2025-11-13 09:16:30.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60871 1 109 1 2025-11-13 09:16:30.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58867 1 80 1 2025-11-13 09:16:30.679 00:00:00.000 UDP 28.104.0.1:58867 -> 198.28.0.2:53 1 64 1 2025-11-13 09:16:30.679 00:00:00.000 UDP 28.104.0.1:60871 -> 198.28.0.2:53 1 64 1 2025-11-13 09:12:05.825 00:05:51.228 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 09:16:51.044 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:12:05.784 00:05:51.219 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 09:17:31.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53979 1 80 1 2025-11-13 09:17:31.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40440 1 109 1 2025-11-13 09:17:30.990 00:00:00.000 UDP 28.104.0.1:53979 -> 198.28.0.2:53 1 64 1 2025-11-13 09:17:30.989 00:00:00.000 UDP 28.104.0.1:40440 -> 198.28.0.2:53 1 64 1 2025-11-13 09:13:57.012 00:05:08.760 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 09:18:31.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40344 1 109 1 2025-11-13 09:18:31.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46009 1 80 1 2025-11-13 09:18:31.294 00:00:00.000 UDP 28.104.0.1:40344 -> 198.28.0.2:53 1 64 1 2025-11-13 09:18:31.294 00:00:00.000 UDP 28.104.0.1:46009 -> 198.28.0.2:53 1 64 1 2025-11-13 09:14:44.314 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2900 1 2025-11-13 09:19:31.606 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49082 1 109 1 2025-11-13 09:19:31.606 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53869 1 80 1 2025-11-13 09:19:31.596 00:00:00.000 UDP 28.104.0.1:49082 -> 198.28.0.2:53 1 64 1 2025-11-13 09:19:31.596 00:00:00.000 UDP 28.104.0.1:53869 -> 198.28.0.2:53 1 64 1 2025-11-13 09:15:05.835 00:05:51.169 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 09:20:31.893 00:00:00.000 UDP 28.104.0.1:42236 -> 198.28.0.2:53 1 64 1 2025-11-13 09:20:31.893 00:00:00.000 UDP 28.104.0.1:40322 -> 198.28.0.2:53 1 64 1 2025-11-13 09:20:31.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42236 1 109 1 2025-11-13 09:20:31.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40322 1 80 1 2025-11-13 09:16:05.769 00:06:00.171 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 09:16:05.769 00:06:00.123 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 09:21:32.193 00:00:00.000 UDP 28.104.0.1:48067 -> 198.28.0.2:53 1 64 1 2025-11-13 09:21:32.193 00:00:00.000 UDP 28.104.0.1:58557 -> 198.28.0.2:53 1 64 1 2025-11-13 09:21:32.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48067 1 109 1 2025-11-13 09:21:32.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58557 1 80 1 2025-11-13 09:21:50.823 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:22:47.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36242 1 80 1 2025-11-13 09:22:47.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35563 1 109 1 2025-11-13 09:22:47.236 00:00:00.000 UDP 28.104.0.1:35563 -> 198.28.0.2:53 1 64 1 2025-11-13 09:22:47.236 00:00:00.000 UDP 28.104.0.1:36242 -> 198.28.0.2:53 1 64 1 2025-11-13 09:18:05.782 00:05:51.223 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 09:18:05.827 00:05:51.227 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 09:23:47.533 00:00:00.000 UDP 28.104.0.1:43988 -> 198.28.0.2:53 1 64 1 2025-11-13 09:23:47.533 00:00:00.000 UDP 28.104.0.1:60635 -> 198.28.0.2:53 1 64 1 2025-11-13 09:23:47.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60635 1 80 1 2025-11-13 09:23:47.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43988 1 109 1 2025-11-13 09:19:57.015 00:05:08.757 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 09:20:04.319 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-11-13 09:24:47.786 00:00:00.000 UDP 28.104.0.1:47962 -> 198.28.0.2:53 1 64 1 2025-11-13 09:24:47.786 00:00:00.000 UDP 28.104.0.1:46549 -> 198.28.0.2:53 1 64 1 2025-11-13 09:24:47.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47962 1 109 1 2025-11-13 09:24:47.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46549 1 80 1 2025-11-13 09:25:48.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42209 1 80 1 2025-11-13 09:25:48.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35796 1 109 1 2025-11-13 09:25:48.088 00:00:00.000 UDP 28.104.0.1:35796 -> 198.28.0.2:53 1 64 1 2025-11-13 09:25:48.088 00:00:00.000 UDP 28.104.0.1:42209 -> 198.28.0.2:53 1 64 1 2025-11-13 09:21:05.837 00:05:51.167 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 09:26:48.382 00:00:00.000 UDP 28.104.0.1:37864 -> 198.28.0.2:53 1 64 1 2025-11-13 09:26:48.382 00:00:00.000 UDP 28.104.0.1:43880 -> 198.28.0.2:53 1 64 1 2025-11-13 09:26:48.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37864 1 80 1 2025-11-13 09:26:48.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43880 1 109 1 2025-11-13 09:26:51.138 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:27:50.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35074 1 80 1 2025-11-13 09:27:50.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36876 1 109 1 2025-11-13 09:27:50.412 00:00:00.000 UDP 28.104.0.1:36876 -> 198.28.0.2:53 1 64 1 2025-11-13 09:27:50.412 00:00:00.000 UDP 28.104.0.1:35074 -> 198.28.0.2:53 1 64 1 2025-11-13 09:23:05.773 00:06:00.174 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 09:23:05.773 00:06:00.123 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 09:28:50.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34570 1 80 1 2025-11-13 09:28:50.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42321 1 109 1 2025-11-13 09:24:05.782 00:05:51.222 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 09:28:50.711 00:00:00.000 UDP 28.104.0.1:34570 -> 198.28.0.2:53 1 64 1 2025-11-13 09:28:50.711 00:00:00.000 UDP 28.104.0.1:42321 -> 198.28.0.2:53 1 64 1 2025-11-13 09:24:05.827 00:05:51.227 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 09:25:24.326 00:05:10.033 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-13 09:29:51.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53419 1 80 1 2025-11-13 09:29:51.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35066 1 109 1 2025-11-13 09:29:51.387 00:00:00.000 UDP 28.104.0.1:35066 -> 198.28.0.2:53 1 64 1 2025-11-13 09:29:51.387 00:00:00.000 UDP 28.104.0.1:53419 -> 198.28.0.2:53 1 64 1 2025-11-13 09:25:57.015 00:05:08.759 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 09:30:51.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54516 1 109 1 2025-11-13 09:30:51.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60787 1 80 1 2025-11-13 09:30:51.695 00:00:00.000 UDP 28.104.0.1:54516 -> 198.28.0.2:53 1 64 1 2025-11-13 09:30:51.694 00:00:00.000 UDP 28.104.0.1:60787 -> 198.28.0.2:53 1 64 1 2025-11-13 09:31:52.005 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33115 1 80 1 2025-11-13 09:31:51.306 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:31:52.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53924 1 109 1 2025-11-13 09:31:51.994 00:00:00.000 UDP 28.104.0.1:53924 -> 198.28.0.2:53 1 64 1 2025-11-13 09:31:51.994 00:00:00.000 UDP 28.104.0.1:33115 -> 198.28.0.2:53 1 64 1 2025-11-13 09:27:05.838 00:05:51.168 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 09:32:52.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32985 1 109 1 2025-11-13 09:32:52.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54252 1 80 1 2025-11-13 09:32:52.303 00:00:00.000 UDP 28.104.0.1:32985 -> 198.28.0.2:53 1 64 1 2025-11-13 09:32:52.303 00:00:00.000 UDP 28.104.0.1:54252 -> 198.28.0.2:53 1 64 1 2025-11-13 09:33:52.605 00:00:00.000 UDP 28.104.0.1:41761 -> 198.28.0.2:53 1 64 1 2025-11-13 09:33:52.605 00:00:00.000 UDP 28.104.0.1:40943 -> 198.28.0.2:53 1 64 1 2025-11-13 09:33:52.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41761 1 80 1 2025-11-13 09:33:52.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40943 1 109 1 2025-11-13 09:34:52.928 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46544 1 80 1 2025-11-13 09:34:52.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55681 1 109 1 2025-11-13 09:34:52.920 00:00:00.000 UDP 28.104.0.1:46544 -> 198.28.0.2:53 1 64 1 2025-11-13 09:34:52.919 00:00:00.000 UDP 28.104.0.1:55681 -> 198.28.0.2:53 1 64 1 2025-11-13 09:30:05.829 00:05:51.226 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 09:30:44.329 00:05:10.000 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2360 1 2025-11-13 09:30:05.784 00:05:51.221 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 09:30:05.774 00:06:00.176 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 09:30:05.774 00:06:00.122 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 09:35:53.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37408 1 109 1 2025-11-13 09:35:53.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43667 1 80 1 2025-11-13 09:35:53.274 00:00:00.000 UDP 28.104.0.1:43667 -> 198.28.0.2:53 1 64 1 2025-11-13 09:35:53.274 00:00:00.000 UDP 28.104.0.1:37408 -> 198.28.0.2:53 1 64 1 2025-11-13 09:31:57.015 00:05:08.760 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 09:36:53.565 00:00:00.000 UDP 28.104.0.1:59340 -> 198.28.0.2:53 1 64 1 2025-11-13 09:36:53.565 00:00:00.000 UDP 28.104.0.1:35835 -> 198.28.0.2:53 1 64 1 2025-11-13 09:36:51.375 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:36:53.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35835 1 80 1 2025-11-13 09:36:53.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59340 1 109 1 2025-11-13 09:37:53.818 00:00:00.000 UDP 28.104.0.1:41947 -> 198.28.0.2:53 1 64 1 2025-11-13 09:37:53.819 00:00:00.000 UDP 28.104.0.1:59355 -> 198.28.0.2:53 1 64 1 2025-11-13 09:37:53.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59355 1 109 1 2025-11-13 09:37:53.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41947 1 80 1 2025-11-13 09:33:05.841 00:05:51.167 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 09:38:54.114 00:00:00.000 UDP 28.104.0.1:56734 -> 198.28.0.2:53 1 64 1 2025-11-13 09:38:54.114 00:00:00.000 UDP 28.104.0.1:38130 -> 198.28.0.2:53 1 64 1 2025-11-13 09:38:54.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38130 1 109 1 2025-11-13 09:38:54.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56734 1 80 1 2025-11-13 09:39:54.408 00:00:00.000 UDP 28.104.0.1:42361 -> 198.28.0.2:53 1 64 1 2025-11-13 09:39:54.408 00:00:00.000 UDP 28.104.0.1:60277 -> 198.28.0.2:53 1 64 1 2025-11-13 09:39:54.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60277 1 80 1 2025-11-13 09:39:54.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42361 1 109 1 2025-11-13 09:36:04.329 00:05:10.116 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2940 1 2025-11-13 09:40:54.705 00:00:00.000 UDP 28.104.0.1:55726 -> 198.28.0.2:53 1 64 1 2025-11-13 09:36:05.831 00:05:51.226 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 09:40:54.705 00:00:00.000 UDP 28.104.0.1:53259 -> 198.28.0.2:53 1 64 1 2025-11-13 09:40:54.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53259 1 80 1 2025-11-13 09:36:05.784 00:05:51.224 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 09:40:54.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55726 1 109 1 2025-11-13 09:41:51.697 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:41:55.002 00:00:00.000 UDP 28.104.0.1:56644 -> 198.28.0.2:53 1 64 1 2025-11-13 09:41:55.002 00:00:00.000 UDP 28.104.0.1:39789 -> 198.28.0.2:53 1 64 1 2025-11-13 09:41:55.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56644 1 109 1 2025-11-13 09:41:55.012 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39789 1 80 1 2025-11-13 09:37:05.775 00:06:00.177 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 09:37:57.017 00:05:08.760 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 09:37:05.775 00:06:00.124 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 09:43:07.423 00:00:00.000 UDP 28.104.0.1:56364 -> 198.28.0.2:53 1 64 1 2025-11-13 09:43:07.423 00:00:00.000 UDP 28.104.0.1:56007 -> 198.28.0.2:53 1 64 1 2025-11-13 09:43:07.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56364 1 109 1 2025-11-13 09:43:07.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56007 1 80 1 2025-11-13 09:39:05.841 00:05:51.170 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 09:44:07.718 00:00:00.000 UDP 28.104.0.1:33308 -> 198.28.0.2:53 1 64 1 2025-11-13 09:44:07.718 00:00:00.000 UDP 28.104.0.1:50457 -> 198.28.0.2:53 1 64 1 2025-11-13 09:44:07.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33308 1 109 1 2025-11-13 09:44:07.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50457 1 80 1 2025-11-13 09:45:08.009 00:00:00.000 UDP 28.104.0.1:60213 -> 198.28.0.2:53 1 64 1 2025-11-13 09:45:08.009 00:00:00.000 UDP 28.104.0.1:50647 -> 198.28.0.2:53 1 64 1 2025-11-13 09:45:08.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50647 1 80 1 2025-11-13 09:45:08.024 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60213 1 109 1 2025-11-13 09:41:24.335 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2676 1 2025-11-13 09:46:08.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60128 1 80 1 2025-11-13 09:46:08.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42543 1 109 1 2025-11-13 09:46:08.268 00:00:00.000 UDP 28.104.0.1:60128 -> 198.28.0.2:53 1 64 1 2025-11-13 09:46:08.268 00:00:00.000 UDP 28.104.0.1:42543 -> 198.28.0.2:53 1 64 1 2025-11-13 09:46:51.395 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:42:05.787 00:05:51.247 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 09:42:05.831 00:05:51.253 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 09:47:08.559 00:00:00.000 UDP 28.104.0.1:44860 -> 198.28.0.2:53 1 64 1 2025-11-13 09:47:08.559 00:00:00.000 UDP 28.104.0.1:59726 -> 198.28.0.2:53 1 64 1 2025-11-13 09:47:08.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59726 1 109 1 2025-11-13 09:47:08.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44860 1 80 1 2025-11-13 09:48:08.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52506 1 80 1 2025-11-13 09:48:08.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33317 1 109 1 2025-11-13 09:48:08.851 00:00:00.000 UDP 28.104.0.1:33317 -> 198.28.0.2:53 1 64 1 2025-11-13 09:48:08.851 00:00:00.000 UDP 28.104.0.1:52506 -> 198.28.0.2:53 1 64 1 2025-11-13 09:43:57.020 00:05:08.760 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 09:44:05.778 00:06:00.177 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 09:44:05.778 00:06:00.125 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 09:49:09.162 00:00:00.000 UDP 28.104.0.1:59412 -> 198.28.0.2:53 1 64 1 2025-11-13 09:49:09.163 00:00:00.000 UDP 28.104.0.1:58157 -> 198.28.0.2:53 1 64 1 2025-11-13 09:49:09.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59412 1 109 1 2025-11-13 09:49:09.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58157 1 80 1 2025-11-13 09:45:05.843 00:05:51.193 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 09:50:09.454 00:00:00.000 UDP 28.104.0.1:47644 -> 198.28.0.2:53 1 64 1 2025-11-13 09:50:09.454 00:00:00.000 UDP 28.104.0.1:37472 -> 198.28.0.2:53 1 64 1 2025-11-13 09:50:09.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47644 1 80 1 2025-11-13 09:50:09.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37472 1 109 1 2025-11-13 09:46:44.347 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2640 1 2025-11-13 09:51:09.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52309 1 109 1 2025-11-13 09:51:09.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45911 1 80 1 2025-11-13 09:51:09.746 00:00:00.000 UDP 28.104.0.1:45911 -> 198.28.0.2:53 1 64 1 2025-11-13 09:51:09.746 00:00:00.000 UDP 28.104.0.1:52309 -> 198.28.0.2:53 1 64 1 2025-11-13 09:51:51.596 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:52:10.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47531 1 80 1 2025-11-13 09:52:10.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56639 1 109 1 2025-11-13 09:52:10.053 00:00:00.000 UDP 28.104.0.1:47531 -> 198.28.0.2:53 1 64 1 2025-11-13 09:52:10.053 00:00:00.000 UDP 28.104.0.1:56639 -> 198.28.0.2:53 1 64 1 2025-11-13 09:48:05.833 00:05:51.257 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 09:48:05.789 00:05:51.250 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 09:53:10.367 00:00:00.000 UDP 28.104.0.1:45028 -> 198.28.0.2:53 1 64 1 2025-11-13 09:53:10.367 00:00:00.000 UDP 28.104.0.1:37125 -> 198.28.0.2:53 1 64 1 2025-11-13 09:53:10.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45028 1 109 1 2025-11-13 09:53:10.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37125 1 80 1 2025-11-13 09:49:57.044 00:05:08.742 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 09:54:10.680 00:00:00.000 UDP 28.104.0.1:39991 -> 198.28.0.2:53 1 64 1 2025-11-13 09:54:10.680 00:00:00.000 UDP 28.104.0.1:43369 -> 198.28.0.2:53 1 64 1 2025-11-13 09:54:10.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43369 1 80 1 2025-11-13 09:54:10.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39991 1 109 1 2025-11-13 09:55:10.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34644 1 109 1 2025-11-13 09:55:10.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45564 1 80 1 2025-11-13 09:55:10.934 00:00:00.000 UDP 28.104.0.1:34644 -> 198.28.0.2:53 1 64 1 2025-11-13 09:55:10.934 00:00:00.000 UDP 28.104.0.1:45564 -> 198.28.0.2:53 1 64 1 2025-11-13 09:51:05.843 00:05:51.197 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 09:51:05.780 00:06:00.174 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 09:51:05.780 00:06:00.124 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 09:56:11.332 00:00:00.000 UDP 28.104.0.1:52118 -> 198.28.0.2:53 1 64 1 2025-11-13 09:56:11.332 00:00:00.000 UDP 28.104.0.1:43240 -> 198.28.0.2:53 1 64 1 2025-11-13 09:56:11.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52118 1 80 1 2025-11-13 09:56:11.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43240 1 109 1 2025-11-13 09:52:04.358 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-13 09:56:51.881 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 09:57:11.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58058 1 80 1 2025-11-13 09:57:11.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34421 1 109 1 2025-11-13 09:57:11.626 00:00:00.000 UDP 28.104.0.1:58058 -> 198.28.0.2:53 1 64 1 2025-11-13 09:57:11.626 00:00:00.000 UDP 28.104.0.1:34421 -> 198.28.0.2:53 1 64 1 2025-11-13 09:58:11.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44274 1 80 1 2025-11-13 09:58:11.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55244 1 109 1 2025-11-13 09:58:11.920 00:00:00.000 UDP 28.104.0.1:44274 -> 198.28.0.2:53 1 64 1 2025-11-13 09:58:11.922 00:00:00.000 UDP 28.104.0.1:55244 -> 198.28.0.2:53 1 64 1 Summary: total flows: 317, total bytes: 95025, total packets: 1402, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-11-13 08:54:05 - 2025-11-13 09:58:11 Total flows processed: 317, passed: 317, Blocks skipped: 0, Bytes read: 33032 Sys: 0.0053s User: 0.0027s Wall: 0.0040s flows/second: 79951.6 Runtime: 0.0040s