Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 09:54:06.497 00:05:50.935 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 09:58:59.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60750 1 80 1 2025-11-14 09:58:59.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48069 1 109 1 2025-11-14 09:58:59.708 00:00:00.000 UDP 28.104.0.1:60750 -> 198.28.0.2:53 1 64 1 2025-11-14 09:58:59.708 00:00:00.000 UDP 28.104.0.1:48069 -> 198.28.0.2:53 1 64 1 2025-11-14 09:54:06.488 00:06:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 10:00:00.047 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37877 1 80 1 2025-11-14 10:00:00.047 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56133 1 109 1 2025-11-14 10:00:00.036 00:00:00.000 UDP 28.104.0.1:56133 -> 198.28.0.2:53 1 64 1 2025-11-14 10:00:00.037 00:00:00.000 UDP 28.104.0.1:37877 -> 198.28.0.2:53 1 64 1 2025-11-14 09:55:57.437 00:05:09.052 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 09:56:36.351 00:05:10.021 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2840 1 2025-11-14 10:01:00.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41337 1 109 1 2025-11-14 10:01:00.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36609 1 80 1 2025-11-14 10:01:00.358 00:00:00.000 UDP 28.104.0.1:41337 -> 198.28.0.2:53 1 64 1 2025-11-14 10:01:00.358 00:00:00.000 UDP 28.104.0.1:36609 -> 198.28.0.2:53 1 64 1 2025-11-14 09:57:06.537 00:05:50.895 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 10:02:00.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37154 1 109 1 2025-11-14 10:02:00.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52072 1 80 1 2025-11-14 10:02:00.670 00:00:00.000 UDP 28.104.0.1:37154 -> 198.28.0.2:53 1 64 1 2025-11-14 10:02:00.670 00:00:00.000 UDP 28.104.0.1:52072 -> 198.28.0.2:53 1 64 1 2025-11-14 09:57:06.490 00:06:00.009 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 10:02:20.725 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:03:00.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37251 1 109 1 2025-11-14 10:03:00.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48771 1 80 1 2025-11-14 10:03:00.966 00:00:00.000 UDP 28.104.0.1:48771 -> 198.28.0.2:53 1 64 1 2025-11-14 10:03:00.966 00:00:00.000 UDP 28.104.0.1:37251 -> 198.28.0.2:53 1 64 1 2025-11-14 10:04:01.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58373 1 109 1 2025-11-14 10:04:01.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42690 1 80 1 2025-11-14 10:04:01.264 00:00:00.000 UDP 28.104.0.1:58373 -> 198.28.0.2:53 1 64 1 2025-11-14 10:04:01.264 00:00:00.000 UDP 28.104.0.1:42690 -> 198.28.0.2:53 1 64 1 2025-11-14 09:59:57.482 00:05:09.047 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 10:00:06.498 00:05:50.934 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 10:05:02.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37756 1 109 1 2025-11-14 10:05:02.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38118 1 80 1 2025-11-14 10:05:02.177 00:00:00.000 UDP 28.104.0.1:37756 -> 198.28.0.2:53 1 64 1 2025-11-14 10:05:02.177 00:00:00.000 UDP 28.104.0.1:38118 -> 198.28.0.2:53 1 64 1 2025-11-14 10:06:02.462 00:00:00.000 UDP 28.104.0.1:38016 -> 198.28.0.2:53 1 64 1 2025-11-14 10:06:02.462 00:00:00.000 UDP 28.104.0.1:51612 -> 198.28.0.2:53 1 64 1 2025-11-14 10:06:02.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38016 1 80 1 2025-11-14 10:06:02.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51612 1 109 1 2025-11-14 10:01:56.373 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2756 1 2025-11-14 10:01:06.490 00:06:00.077 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 10:01:57.444 00:05:09.050 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 10:07:02.754 00:00:00.000 UDP 28.104.0.1:49740 -> 198.28.0.2:53 1 64 1 2025-11-14 10:07:02.754 00:00:00.000 UDP 28.104.0.1:41437 -> 198.28.0.2:53 1 64 1 2025-11-14 10:07:02.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41437 1 109 1 2025-11-14 10:07:02.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49740 1 80 1 2025-11-14 10:07:20.904 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:08:03.306 00:00:00.000 UDP 28.104.0.1:54362 -> 198.28.0.2:53 1 64 1 2025-11-14 10:08:03.307 00:00:00.000 UDP 28.104.0.1:58650 -> 198.28.0.2:53 1 64 1 2025-11-14 10:03:06.549 00:05:50.885 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 10:08:03.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58650 1 109 1 2025-11-14 10:08:03.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54362 1 80 1 2025-11-14 10:09:03.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33845 1 80 1 2025-11-14 10:09:03.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46947 1 109 1 2025-11-14 10:09:03.558 00:00:00.000 UDP 28.104.0.1:33845 -> 198.28.0.2:53 1 64 1 2025-11-14 10:09:03.558 00:00:00.000 UDP 28.104.0.1:46947 -> 198.28.0.2:53 1 64 1 2025-11-14 10:04:06.491 00:06:00.009 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 10:10:03.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50371 1 80 1 2025-11-14 10:10:03.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58753 1 109 1 2025-11-14 10:10:03.853 00:00:00.000 UDP 28.104.0.1:58753 -> 198.28.0.2:53 1 64 1 2025-11-14 10:10:03.853 00:00:00.000 UDP 28.104.0.1:50371 -> 198.28.0.2:53 1 64 1 2025-11-14 10:05:57.483 00:05:09.047 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 10:06:06.503 00:05:50.934 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 10:11:04.173 00:00:00.000 UDP 28.104.0.1:52171 -> 198.28.0.2:53 1 64 1 2025-11-14 10:11:04.173 00:00:00.000 UDP 28.104.0.1:49281 -> 198.28.0.2:53 1 64 1 2025-11-14 10:11:04.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52171 1 80 1 2025-11-14 10:11:04.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49281 1 109 1 2025-11-14 10:07:16.377 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-14 10:07:57.443 00:05:09.051 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 10:12:04.465 00:00:00.000 UDP 28.104.0.1:43002 -> 198.28.0.2:53 1 64 1 2025-11-14 10:12:04.465 00:00:00.000 UDP 28.104.0.1:37866 -> 198.28.0.2:53 1 64 1 2025-11-14 10:12:04.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37866 1 109 1 2025-11-14 10:12:04.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43002 1 80 1 2025-11-14 10:12:20.865 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:13:04.777 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40795 1 109 1 2025-11-14 10:13:04.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38006 1 80 1 2025-11-14 10:08:06.494 00:06:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 10:13:04.766 00:00:00.000 UDP 28.104.0.1:40795 -> 198.28.0.2:53 1 64 1 2025-11-14 10:13:04.765 00:00:00.000 UDP 28.104.0.1:38006 -> 198.28.0.2:53 1 64 1 2025-11-14 10:09:06.540 00:05:50.896 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 10:14:10.948 00:00:00.000 UDP 28.104.0.1:40508 -> 198.28.0.2:53 1 64 1 2025-11-14 10:14:10.948 00:00:00.000 UDP 28.104.0.1:60341 -> 198.28.0.2:53 1 64 1 2025-11-14 10:14:10.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40508 1 80 1 2025-11-14 10:14:10.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60341 1 109 1 2025-11-14 10:15:11.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47900 1 80 1 2025-11-14 10:15:11.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42776 1 109 1 2025-11-14 10:15:11.251 00:00:00.000 UDP 28.104.0.1:42776 -> 198.28.0.2:53 1 64 1 2025-11-14 10:15:11.251 00:00:00.000 UDP 28.104.0.1:47900 -> 198.28.0.2:53 1 64 1 2025-11-14 10:11:57.487 00:05:09.043 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 10:11:06.494 00:06:00.007 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 10:16:11.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32789 1 80 1 2025-11-14 10:16:11.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33094 1 109 1 2025-11-14 10:16:11.558 00:00:00.000 UDP 28.104.0.1:32789 -> 198.28.0.2:53 1 64 1 2025-11-14 10:16:11.558 00:00:00.000 UDP 28.104.0.1:33094 -> 198.28.0.2:53 1 64 1 2025-11-14 10:12:36.382 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-14 10:12:06.504 00:05:50.932 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 10:17:11.861 00:00:00.000 UDP 28.104.0.1:43208 -> 198.28.0.2:53 1 64 1 2025-11-14 10:17:11.861 00:00:00.000 UDP 28.104.0.1:45412 -> 198.28.0.2:53 1 64 1 2025-11-14 10:17:11.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45412 1 80 1 2025-11-14 10:17:11.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43208 1 109 1 2025-11-14 10:17:21.782 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:13:57.446 00:05:09.049 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 10:18:12.181 00:00:00.000 UDP 28.104.0.1:57943 -> 198.28.0.2:53 1 64 1 2025-11-14 10:18:12.181 00:00:00.000 UDP 28.104.0.1:41005 -> 198.28.0.2:53 1 64 1 2025-11-14 10:18:12.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41005 1 80 1 2025-11-14 10:18:12.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57943 1 109 1 2025-11-14 10:19:12.494 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51293 1 80 1 2025-11-14 10:19:12.494 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44071 1 109 1 2025-11-14 10:19:12.485 00:00:00.000 UDP 28.104.0.1:44071 -> 198.28.0.2:53 1 64 1 2025-11-14 10:19:12.484 00:00:00.000 UDP 28.104.0.1:51293 -> 198.28.0.2:53 1 64 1 2025-11-14 10:15:06.541 00:05:50.896 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 10:20:12.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53404 1 80 1 2025-11-14 10:20:12.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49371 1 109 1 2025-11-14 10:15:06.495 00:06:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 10:20:12.791 00:00:00.000 UDP 28.104.0.1:53404 -> 198.28.0.2:53 1 64 1 2025-11-14 10:20:12.791 00:00:00.000 UDP 28.104.0.1:49371 -> 198.28.0.2:53 1 64 1 2025-11-14 10:21:13.099 00:00:00.000 UDP 28.104.0.1:44603 -> 198.28.0.2:53 1 64 1 2025-11-14 10:21:13.099 00:00:00.000 UDP 28.104.0.1:37341 -> 198.28.0.2:53 1 64 1 2025-11-14 10:21:13.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44603 1 109 1 2025-11-14 10:21:13.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37341 1 80 1 2025-11-14 10:17:57.487 00:05:09.045 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 10:17:56.391 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2540 1 2025-11-14 10:22:13.397 00:00:00.000 UDP 28.104.0.1:59970 -> 198.28.0.2:53 1 64 1 2025-11-14 10:22:13.397 00:00:00.000 UDP 28.104.0.1:42310 -> 198.28.0.2:53 1 64 1 2025-11-14 10:22:13.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42310 1 109 1 2025-11-14 10:22:13.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59970 1 80 1 2025-11-14 10:22:21.201 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:18:06.506 00:05:50.932 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 10:23:13.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33838 1 80 1 2025-11-14 10:23:13.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39765 1 109 1 2025-11-14 10:18:06.496 00:06:00.008 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 10:23:13.664 00:00:00.000 UDP 28.104.0.1:33838 -> 198.28.0.2:53 1 64 1 2025-11-14 10:23:13.664 00:00:00.000 UDP 28.104.0.1:39765 -> 198.28.0.2:53 1 64 1 2025-11-14 10:19:57.447 00:05:09.049 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 10:24:13.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57946 1 109 1 2025-11-14 10:24:13.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45699 1 80 1 2025-11-14 10:24:13.959 00:00:00.000 UDP 28.104.0.1:45699 -> 198.28.0.2:53 1 64 1 2025-11-14 10:24:13.959 00:00:00.000 UDP 28.104.0.1:57946 -> 198.28.0.2:53 1 64 1 2025-11-14 10:25:14.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40362 1 109 1 2025-11-14 10:25:14.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50924 1 80 1 2025-11-14 10:25:14.255 00:00:00.000 UDP 28.104.0.1:50924 -> 198.28.0.2:53 1 64 1 2025-11-14 10:25:14.255 00:00:00.000 UDP 28.104.0.1:40362 -> 198.28.0.2:53 1 64 1 2025-11-14 10:21:06.543 00:05:50.896 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 10:26:14.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37204 1 80 1 2025-11-14 10:26:14.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49236 1 109 1 2025-11-14 10:26:14.604 00:00:00.000 UDP 28.104.0.1:37204 -> 198.28.0.2:53 1 64 1 2025-11-14 10:26:14.604 00:00:00.000 UDP 28.104.0.1:49236 -> 198.28.0.2:53 1 64 1 2025-11-14 10:22:06.496 00:06:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 10:27:14.897 00:00:00.000 UDP 28.104.0.1:40698 -> 198.28.0.2:53 1 64 1 2025-11-14 10:27:14.897 00:00:00.000 UDP 28.104.0.1:56239 -> 198.28.0.2:53 1 64 1 2025-11-14 10:27:14.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40698 1 80 1 2025-11-14 10:27:14.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56239 1 109 1 2025-11-14 10:27:21.076 00:00:00.034 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:23:16.397 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2888 1 2025-11-14 10:23:57.488 00:05:09.049 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 10:28:15.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52832 1 80 1 2025-11-14 10:28:15.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49639 1 109 1 2025-11-14 10:28:15.201 00:00:00.000 UDP 28.104.0.1:49639 -> 198.28.0.2:53 1 64 1 2025-11-14 10:28:15.201 00:00:00.000 UDP 28.104.0.1:52832 -> 198.28.0.2:53 1 64 1 2025-11-14 10:24:06.506 00:05:50.933 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 10:29:15.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40411 1 80 1 2025-11-14 10:29:15.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55165 1 109 1 2025-11-14 10:29:15.491 00:00:00.000 UDP 28.104.0.1:55165 -> 198.28.0.2:53 1 64 1 2025-11-14 10:29:15.491 00:00:00.000 UDP 28.104.0.1:40411 -> 198.28.0.2:53 1 64 1 2025-11-14 10:25:57.448 00:05:09.049 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 10:25:06.496 00:06:00.009 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 10:30:15.784 00:00:00.000 UDP 28.104.0.1:44985 -> 198.28.0.2:53 1 64 1 2025-11-14 10:30:15.784 00:00:00.000 UDP 28.104.0.1:54271 -> 198.28.0.2:53 1 64 1 2025-11-14 10:30:15.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44985 1 80 1 2025-11-14 10:30:15.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54271 1 109 1 2025-11-14 10:31:16.087 00:00:00.000 UDP 28.104.0.1:39675 -> 198.28.0.2:53 1 64 1 2025-11-14 10:31:16.087 00:00:00.000 UDP 28.104.0.1:59333 -> 198.28.0.2:53 1 64 1 2025-11-14 10:31:16.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59333 1 80 1 2025-11-14 10:31:16.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39675 1 109 1 2025-11-14 10:27:06.542 00:05:50.897 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 10:32:16.344 00:00:00.000 UDP 28.104.0.1:47132 -> 198.28.0.2:53 1 64 1 2025-11-14 10:32:16.345 00:00:00.000 UDP 28.104.0.1:35775 -> 198.28.0.2:53 1 64 1 2025-11-14 10:32:16.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35775 1 80 1 2025-11-14 10:32:16.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47132 1 109 1 2025-11-14 10:32:21.532 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:28:36.399 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2868 1 2025-11-14 10:33:16.641 00:00:00.000 UDP 28.104.0.1:53137 -> 198.28.0.2:53 1 64 1 2025-11-14 10:33:16.641 00:00:00.000 UDP 28.104.0.1:48558 -> 198.28.0.2:53 1 64 1 2025-11-14 10:33:16.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53137 1 109 1 2025-11-14 10:33:16.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48558 1 80 1 2025-11-14 10:29:06.500 00:06:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 10:29:57.491 00:05:09.048 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 10:34:16.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34643 1 109 1 2025-11-14 10:34:16.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49044 1 80 1 2025-11-14 10:34:16.942 00:00:00.000 UDP 28.104.0.1:34643 -> 198.28.0.2:53 1 64 1 2025-11-14 10:34:16.942 00:00:00.000 UDP 28.104.0.1:49044 -> 198.28.0.2:53 1 64 1 2025-11-14 10:30:06.507 00:05:50.933 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 10:35:17.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42379 1 80 1 2025-11-14 10:35:17.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46385 1 109 1 2025-11-14 10:35:17.246 00:00:00.000 UDP 28.104.0.1:46385 -> 198.28.0.2:53 1 64 1 2025-11-14 10:35:17.246 00:00:00.000 UDP 28.104.0.1:42379 -> 198.28.0.2:53 1 64 1 2025-11-14 10:31:57.448 00:05:09.051 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 10:36:17.563 00:00:00.000 UDP 28.104.0.1:53551 -> 198.28.0.2:53 1 64 1 2025-11-14 10:36:17.563 00:00:00.000 UDP 28.104.0.1:46421 -> 198.28.0.2:53 1 64 1 2025-11-14 10:36:17.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53551 1 109 1 2025-11-14 10:36:17.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46421 1 80 1 2025-11-14 10:32:06.497 00:06:00.010 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 10:37:17.845 00:00:00.000 UDP 28.104.0.1:56359 -> 198.28.0.2:53 1 64 1 2025-11-14 10:37:17.845 00:00:00.000 UDP 28.104.0.1:40142 -> 198.28.0.2:53 1 64 1 2025-11-14 10:37:17.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56359 1 109 1 2025-11-14 10:37:17.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40142 1 80 1 2025-11-14 10:37:21.460 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:33:06.547 00:05:50.893 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 10:33:56.410 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-11-14 10:38:18.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48782 1 80 1 2025-11-14 10:38:18.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35222 1 109 1 2025-11-14 10:38:18.148 00:00:00.000 UDP 28.104.0.1:48782 -> 198.28.0.2:53 1 64 1 2025-11-14 10:38:18.148 00:00:00.000 UDP 28.104.0.1:35222 -> 198.28.0.2:53 1 64 1 2025-11-14 10:39:18.403 00:00:00.000 UDP 28.104.0.1:52113 -> 198.28.0.2:53 1 64 1 2025-11-14 10:39:18.399 00:00:00.000 UDP 28.104.0.1:40603 -> 198.28.0.2:53 1 64 1 2025-11-14 10:39:18.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52113 1 109 1 2025-11-14 10:39:18.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40603 1 80 1 2025-11-14 10:35:57.490 00:05:09.050 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 10:40:18.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47358 1 80 1 2025-11-14 10:40:18.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59931 1 109 1 2025-11-14 10:40:18.698 00:00:00.000 UDP 28.104.0.1:47358 -> 198.28.0.2:53 1 64 1 2025-11-14 10:40:18.698 00:00:00.000 UDP 28.104.0.1:59931 -> 198.28.0.2:53 1 64 1 2025-11-14 10:36:06.509 00:05:50.931 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 10:36:06.500 00:06:00.078 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 10:41:18.998 00:00:00.000 UDP 28.104.0.1:51471 -> 198.28.0.2:53 1 64 1 2025-11-14 10:41:18.998 00:00:00.000 UDP 28.104.0.1:54938 -> 198.28.0.2:53 1 64 1 2025-11-14 10:41:19.011 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54938 1 80 1 2025-11-14 10:41:19.011 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51471 1 109 1 2025-11-14 10:37:57.449 00:05:09.054 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 10:42:19.290 00:00:00.000 UDP 28.104.0.1:37707 -> 198.28.0.2:53 1 64 1 2025-11-14 10:42:19.290 00:00:00.000 UDP 28.104.0.1:36171 -> 198.28.0.2:53 1 64 1 2025-11-14 10:42:21.686 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:42:19.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36171 1 80 1 2025-11-14 10:42:19.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37707 1 109 1 2025-11-14 10:43:19.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50267 1 80 1 2025-11-14 10:43:19.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53436 1 109 1 2025-11-14 10:43:19.590 00:00:00.000 UDP 28.104.0.1:50267 -> 198.28.0.2:53 1 64 1 2025-11-14 10:43:19.590 00:00:00.000 UDP 28.104.0.1:53436 -> 198.28.0.2:53 1 64 1 2025-11-14 10:39:16.417 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-14 10:39:06.549 00:05:50.892 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 10:39:06.502 00:06:00.007 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 10:44:19.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47800 1 109 1 2025-11-14 10:44:19.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47712 1 80 1 2025-11-14 10:44:19.920 00:00:00.000 UDP 28.104.0.1:47800 -> 198.28.0.2:53 1 64 1 2025-11-14 10:44:19.920 00:00:00.000 UDP 28.104.0.1:47712 -> 198.28.0.2:53 1 64 1 2025-11-14 10:45:20.237 00:00:00.000 UDP 28.104.0.1:54610 -> 198.28.0.2:53 1 64 1 2025-11-14 10:45:20.237 00:00:00.000 UDP 28.104.0.1:53305 -> 198.28.0.2:53 1 64 1 2025-11-14 10:45:20.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53305 1 109 1 2025-11-14 10:45:20.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54610 1 80 1 2025-11-14 10:41:57.490 00:05:09.050 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 10:46:20.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37130 1 109 1 2025-11-14 10:46:20.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48336 1 80 1 2025-11-14 10:46:20.531 00:00:00.000 UDP 28.104.0.1:37130 -> 198.28.0.2:53 1 64 1 2025-11-14 10:46:20.531 00:00:00.000 UDP 28.104.0.1:48336 -> 198.28.0.2:53 1 64 1 2025-11-14 10:42:06.512 00:05:50.930 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 10:47:20.828 00:00:00.000 UDP 28.104.0.1:39892 -> 198.28.0.2:53 1 64 1 2025-11-14 10:47:20.828 00:00:00.000 UDP 28.104.0.1:57975 -> 198.28.0.2:53 1 64 1 2025-11-14 10:47:21.421 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:47:20.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57975 1 80 1 2025-11-14 10:47:20.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39892 1 109 1 2025-11-14 10:43:06.503 00:06:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 10:43:57.450 00:05:09.052 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 10:48:21.122 00:00:00.000 UDP 28.104.0.1:57089 -> 198.28.0.2:53 1 64 1 2025-11-14 10:48:21.122 00:00:00.000 UDP 28.104.0.1:46071 -> 198.28.0.2:53 1 64 1 2025-11-14 10:48:21.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57089 1 80 1 2025-11-14 10:48:21.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46071 1 109 1 2025-11-14 10:44:36.419 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2620 1 2025-11-14 10:49:21.379 00:00:00.000 UDP 28.104.0.1:39386 -> 198.28.0.2:53 1 64 1 2025-11-14 10:49:21.379 00:00:00.000 UDP 28.104.0.1:48245 -> 198.28.0.2:53 1 64 1 2025-11-14 10:49:21.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39386 1 109 1 2025-11-14 10:49:21.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48245 1 80 1 2025-11-14 10:45:06.550 00:05:50.894 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 10:50:21.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40116 1 80 1 2025-11-14 10:50:21.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41239 1 109 1 2025-11-14 10:50:21.668 00:00:00.000 UDP 28.104.0.1:41239 -> 198.28.0.2:53 1 64 1 2025-11-14 10:50:21.668 00:00:00.000 UDP 28.104.0.1:40116 -> 198.28.0.2:53 1 64 1 2025-11-14 10:46:06.503 00:06:00.010 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 10:51:21.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53463 1 109 1 2025-11-14 10:51:21.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41697 1 80 1 2025-11-14 10:51:21.955 00:00:00.000 UDP 28.104.0.1:53463 -> 198.28.0.2:53 1 64 1 2025-11-14 10:51:21.955 00:00:00.000 UDP 28.104.0.1:41697 -> 198.28.0.2:53 1 64 1 2025-11-14 10:47:57.492 00:05:09.050 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 10:52:21.695 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:52:22.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44300 1 109 1 2025-11-14 10:52:22.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60321 1 80 1 2025-11-14 10:52:22.253 00:00:00.000 UDP 28.104.0.1:44300 -> 198.28.0.2:53 1 64 1 2025-11-14 10:52:22.253 00:00:00.000 UDP 28.104.0.1:60321 -> 198.28.0.2:53 1 64 1 2025-11-14 10:48:06.513 00:05:50.930 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 10:53:22.554 00:00:00.000 UDP 28.104.0.1:33383 -> 198.28.0.2:53 1 64 1 2025-11-14 10:53:22.555 00:00:00.000 UDP 28.104.0.1:37749 -> 198.28.0.2:53 1 64 1 2025-11-14 10:53:22.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37749 1 109 1 2025-11-14 10:53:22.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33383 1 80 1 2025-11-14 10:49:57.452 00:05:09.053 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 10:49:56.427 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2600 1 2025-11-14 10:54:22.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53445 1 109 1 2025-11-14 10:54:22.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54790 1 80 1 2025-11-14 10:54:22.843 00:00:00.000 UDP 28.104.0.1:54790 -> 198.28.0.2:53 1 64 1 2025-11-14 10:54:22.843 00:00:00.000 UDP 28.104.0.1:53445 -> 198.28.0.2:53 1 64 1 2025-11-14 10:50:06.502 00:06:00.094 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 10:55:23.134 00:00:00.000 UDP 28.104.0.1:47924 -> 198.28.0.2:53 1 64 1 2025-11-14 10:55:23.134 00:00:00.000 UDP 28.104.0.1:56090 -> 198.28.0.2:53 1 64 1 2025-11-14 10:55:23.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47924 1 80 1 2025-11-14 10:55:23.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56090 1 109 1 2025-11-14 10:51:06.551 00:05:50.892 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 10:56:23.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42053 1 80 1 2025-11-14 10:56:23.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57948 1 109 1 2025-11-14 10:56:23.426 00:00:00.000 UDP 28.104.0.1:42053 -> 198.28.0.2:53 1 64 1 2025-11-14 10:56:23.425 00:00:00.000 UDP 28.104.0.1:57948 -> 198.28.0.2:53 1 64 1 2025-11-14 10:57:21.708 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 10:57:23.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56553 1 109 1 2025-11-14 10:57:23.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59043 1 80 1 2025-11-14 10:57:23.726 00:00:00.000 UDP 28.104.0.1:59043 -> 198.28.0.2:53 1 64 1 2025-11-14 10:57:23.726 00:00:00.000 UDP 28.104.0.1:56553 -> 198.28.0.2:53 1 64 1 2025-11-14 10:53:57.493 00:05:09.051 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 10:53:06.504 00:06:00.010 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 10:58:24.049 00:00:00.000 UDP 28.104.0.1:40642 -> 198.28.0.2:53 1 64 1 2025-11-14 10:58:24.048 00:00:00.000 UDP 28.104.0.1:48513 -> 198.28.0.2:53 1 64 1 2025-11-14 10:58:24.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40642 1 80 1 2025-11-14 10:58:24.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48513 1 109 1 Summary: total flows: 321, total bytes: 95622, total packets: 1409, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-11-14 09:54:06 - 2025-11-14 10:59:06 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0060s User: 0.0020s Wall: 0.0036s flows/second: 90016.2 Runtime: 0.0036s