Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 11:54:06.527 00:05:50.950 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 11:59:00.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60823 1 109 1 2025-11-14 11:59:00.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55774 1 80 1 2025-11-14 11:59:00.710 00:00:00.000 UDP 28.104.0.1:60823 -> 198.28.0.2:53 1 64 1 2025-11-14 11:59:00.710 00:00:00.000 UDP 28.104.0.1:55774 -> 198.28.0.2:53 1 64 1 2025-11-14 12:00:00.963 00:00:00.000 UDP 28.104.0.1:42262 -> 198.28.0.2:53 1 64 1 2025-11-14 12:00:00.963 00:00:00.000 UDP 28.104.0.1:43886 -> 198.28.0.2:53 1 64 1 2025-11-14 12:00:00.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43886 1 109 1 2025-11-14 12:00:00.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42262 1 80 1 2025-11-14 11:55:57.487 00:05:09.033 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 12:01:01.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43806 1 109 1 2025-11-14 12:01:01.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48990 1 80 1 2025-11-14 12:01:01.257 00:00:00.000 UDP 28.104.0.1:48990 -> 198.28.0.2:53 1 64 1 2025-11-14 12:01:01.257 00:00:00.000 UDP 28.104.0.1:43806 -> 198.28.0.2:53 1 64 1 2025-11-14 11:56:06.519 00:06:00.027 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 11:57:06.580 00:05:50.902 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 12:02:01.551 00:00:00.000 UDP 28.104.0.1:48213 -> 198.28.0.2:53 1 64 1 2025-11-14 12:02:01.551 00:00:00.000 UDP 28.104.0.1:35322 -> 198.28.0.2:53 1 64 1 2025-11-14 12:02:01.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35322 1 80 1 2025-11-14 12:02:01.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48213 1 109 1 2025-11-14 12:02:23.238 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:03:01.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54938 1 80 1 2025-11-14 12:03:01.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37922 1 109 1 2025-11-14 12:03:01.843 00:00:00.000 UDP 28.104.0.1:37922 -> 198.28.0.2:53 1 64 1 2025-11-14 12:03:01.843 00:00:00.000 UDP 28.104.0.1:54938 -> 198.28.0.2:53 1 64 1 2025-11-14 11:59:16.530 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-14 12:04:02.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48477 1 109 1 2025-11-14 12:04:02.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58495 1 80 1 2025-11-14 12:04:02.177 00:00:00.000 UDP 28.104.0.1:58495 -> 198.28.0.2:53 1 64 1 2025-11-14 12:04:02.177 00:00:00.000 UDP 28.104.0.1:48477 -> 198.28.0.2:53 1 64 1 2025-11-14 11:59:57.528 00:05:09.044 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 12:00:06.530 00:05:50.954 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 12:05:02.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42745 1 80 1 2025-11-14 12:05:02.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56094 1 109 1 2025-11-14 12:05:02.528 00:00:00.000 UDP 28.104.0.1:42745 -> 198.28.0.2:53 1 64 1 2025-11-14 12:05:02.529 00:00:00.000 UDP 28.104.0.1:56094 -> 198.28.0.2:53 1 64 1 2025-11-14 12:00:06.521 00:06:00.124 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 12:06:02.833 00:00:00.000 UDP 28.104.0.1:35632 -> 198.28.0.2:53 1 64 1 2025-11-14 12:06:02.833 00:00:00.000 UDP 28.104.0.1:59449 -> 198.28.0.2:53 1 64 1 2025-11-14 12:06:02.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59449 1 80 1 2025-11-14 12:06:02.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35632 1 109 1 2025-11-14 12:01:57.487 00:05:09.036 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 12:07:03.175 00:00:00.000 UDP 28.104.0.1:53216 -> 198.28.0.2:53 1 64 1 2025-11-14 12:07:03.175 00:00:00.000 UDP 28.104.0.1:54381 -> 198.28.0.2:53 1 64 1 2025-11-14 12:07:03.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54381 1 109 1 2025-11-14 12:07:03.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53216 1 80 1 2025-11-14 12:07:23.268 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:03:06.581 00:05:50.907 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 12:08:03.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60819 1 109 1 2025-11-14 12:08:03.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56079 1 80 1 2025-11-14 12:08:03.475 00:00:00.000 UDP 28.104.0.1:60819 -> 198.28.0.2:53 1 64 1 2025-11-14 12:08:03.475 00:00:00.000 UDP 28.104.0.1:56079 -> 198.28.0.2:53 1 64 1 2025-11-14 12:03:06.520 00:06:00.031 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 12:04:36.535 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-14 12:09:03.781 00:00:00.000 UDP 28.104.0.1:50905 -> 198.28.0.2:53 1 64 1 2025-11-14 12:09:03.781 00:00:00.000 UDP 28.104.0.1:37991 -> 198.28.0.2:53 1 64 1 2025-11-14 12:09:03.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37991 1 80 1 2025-11-14 12:09:03.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50905 1 109 1 2025-11-14 12:10:04.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47366 1 109 1 2025-11-14 12:10:04.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52068 1 80 1 2025-11-14 12:05:57.535 00:05:09.037 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 12:10:04.651 00:00:00.000 UDP 28.104.0.1:52068 -> 198.28.0.2:53 1 64 1 2025-11-14 12:10:04.651 00:00:00.000 UDP 28.104.0.1:47366 -> 198.28.0.2:53 1 64 1 2025-11-14 12:06:06.532 00:05:50.953 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 12:11:04.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41475 1 80 1 2025-11-14 12:11:04.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42700 1 109 1 2025-11-14 12:11:04.939 00:00:00.000 UDP 28.104.0.1:41475 -> 198.28.0.2:53 1 64 1 2025-11-14 12:11:04.939 00:00:00.000 UDP 28.104.0.1:42700 -> 198.28.0.2:53 1 64 1 2025-11-14 12:07:06.523 00:06:00.131 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 12:07:57.494 00:05:09.039 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 12:12:05.249 00:00:00.000 UDP 28.104.0.1:51248 -> 198.28.0.2:53 1 64 1 2025-11-14 12:12:05.249 00:00:00.000 UDP 28.104.0.1:56524 -> 198.28.0.2:53 1 64 1 2025-11-14 12:12:05.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51248 1 109 1 2025-11-14 12:12:05.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56524 1 80 1 2025-11-14 12:12:23.481 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:13:05.547 00:00:00.000 UDP 28.104.0.1:41222 -> 198.28.0.2:53 1 64 1 2025-11-14 12:13:05.546 00:00:00.000 UDP 28.104.0.1:39258 -> 198.28.0.2:53 1 64 1 2025-11-14 12:13:05.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39258 1 109 1 2025-11-14 12:13:05.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41222 1 80 1 2025-11-14 12:09:06.582 00:05:50.905 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 12:14:05.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58912 1 109 1 2025-11-14 12:14:05.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54652 1 80 1 2025-11-14 12:14:05.848 00:00:00.000 UDP 28.104.0.1:58912 -> 198.28.0.2:53 1 64 1 2025-11-14 12:14:05.849 00:00:00.000 UDP 28.104.0.1:54652 -> 198.28.0.2:53 1 64 1 2025-11-14 12:09:56.541 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-14 12:15:06.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60112 1 109 1 2025-11-14 12:15:06.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52915 1 80 1 2025-11-14 12:15:06.162 00:00:00.000 UDP 28.104.0.1:52915 -> 198.28.0.2:53 1 64 1 2025-11-14 12:10:06.523 00:06:00.030 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 12:15:06.162 00:00:00.000 UDP 28.104.0.1:60112 -> 198.28.0.2:53 1 64 1 2025-11-14 12:16:06.470 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44038 1 80 1 2025-11-14 12:16:06.468 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52343 1 109 1 2025-11-14 12:11:57.535 00:05:09.039 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 12:16:06.457 00:00:00.000 UDP 28.104.0.1:52343 -> 198.28.0.2:53 1 64 1 2025-11-14 12:16:06.457 00:00:00.000 UDP 28.104.0.1:44038 -> 198.28.0.2:53 1 64 1 2025-11-14 12:12:06.542 00:05:50.944 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 12:17:06.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42866 1 109 1 2025-11-14 12:17:06.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58905 1 80 1 2025-11-14 12:17:06.764 00:00:00.000 UDP 28.104.0.1:58905 -> 198.28.0.2:53 1 64 1 2025-11-14 12:17:06.764 00:00:00.000 UDP 28.104.0.1:42866 -> 198.28.0.2:53 1 64 1 2025-11-14 12:17:23.395 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:18:07.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37180 1 109 1 2025-11-14 12:18:07.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38630 1 80 1 2025-11-14 12:18:07.079 00:00:00.000 UDP 28.104.0.1:37180 -> 198.28.0.2:53 1 64 1 2025-11-14 12:13:57.497 00:05:09.039 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 12:18:07.079 00:00:00.000 UDP 28.104.0.1:38630 -> 198.28.0.2:53 1 64 1 2025-11-14 12:14:06.533 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 12:19:07.380 00:00:00.000 UDP 28.104.0.1:52890 -> 198.28.0.2:53 1 64 1 2025-11-14 12:19:07.380 00:00:00.000 UDP 28.104.0.1:51221 -> 198.28.0.2:53 1 64 1 2025-11-14 12:19:07.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51221 1 109 1 2025-11-14 12:19:07.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52890 1 80 1 2025-11-14 12:15:16.552 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2660 1 2025-11-14 12:15:06.582 00:05:50.905 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 12:20:07.681 00:00:00.000 UDP 28.104.0.1:45275 -> 198.28.0.2:53 1 64 1 2025-11-14 12:20:07.680 00:00:00.000 UDP 28.104.0.1:55588 -> 198.28.0.2:53 1 64 1 2025-11-14 12:20:07.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55588 1 109 1 2025-11-14 12:20:07.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45275 1 80 1 2025-11-14 12:21:07.981 00:00:00.000 UDP 28.104.0.1:50456 -> 198.28.0.2:53 1 64 1 2025-11-14 12:21:07.981 00:00:00.000 UDP 28.104.0.1:56571 -> 198.28.0.2:53 1 64 1 2025-11-14 12:21:07.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50456 1 80 1 2025-11-14 12:21:07.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56571 1 109 1 2025-11-14 12:22:08.305 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37160 1 109 1 2025-11-14 12:22:08.305 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39986 1 80 1 2025-11-14 12:22:08.294 00:00:00.000 UDP 28.104.0.1:37160 -> 198.28.0.2:53 1 64 1 2025-11-14 12:17:57.537 00:05:09.038 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 12:17:06.535 00:06:00.019 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 12:22:08.294 00:00:00.000 UDP 28.104.0.1:39986 -> 198.28.0.2:53 1 64 1 2025-11-14 12:22:23.502 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:18:06.545 00:05:50.944 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 12:23:08.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59400 1 80 1 2025-11-14 12:23:08.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57530 1 109 1 2025-11-14 12:23:08.587 00:00:00.000 UDP 28.104.0.1:57530 -> 198.28.0.2:53 1 64 1 2025-11-14 12:23:08.587 00:00:00.000 UDP 28.104.0.1:59400 -> 198.28.0.2:53 1 64 1 2025-11-14 12:24:08.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42935 1 109 1 2025-11-14 12:24:08.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54120 1 80 1 2025-11-14 12:24:08.890 00:00:00.000 UDP 28.104.0.1:42935 -> 198.28.0.2:53 1 64 1 2025-11-14 12:19:57.497 00:05:09.039 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 12:24:08.890 00:00:00.000 UDP 28.104.0.1:54120 -> 198.28.0.2:53 1 64 1 2025-11-14 12:20:36.561 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2784 1 2025-11-14 12:25:09.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47267 1 80 1 2025-11-14 12:25:09.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40917 1 109 1 2025-11-14 12:25:09.192 00:00:00.000 UDP 28.104.0.1:40917 -> 198.28.0.2:53 1 64 1 2025-11-14 12:25:09.192 00:00:00.000 UDP 28.104.0.1:47267 -> 198.28.0.2:53 1 64 1 2025-11-14 12:21:06.584 00:05:50.909 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 12:21:06.535 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 12:26:09.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58649 1 80 1 2025-11-14 12:26:09.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52623 1 109 1 2025-11-14 12:26:09.480 00:00:00.000 UDP 28.104.0.1:58649 -> 198.28.0.2:53 1 64 1 2025-11-14 12:26:09.480 00:00:00.000 UDP 28.104.0.1:52623 -> 198.28.0.2:53 1 64 1 2025-11-14 12:27:09.781 00:00:00.000 UDP 28.104.0.1:42596 -> 198.28.0.2:53 1 64 1 2025-11-14 12:27:09.781 00:00:00.000 UDP 28.104.0.1:39684 -> 198.28.0.2:53 1 64 1 2025-11-14 12:27:09.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42596 1 80 1 2025-11-14 12:27:09.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39684 1 109 1 2025-11-14 12:27:23.607 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:23:57.539 00:05:09.037 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 12:28:10.100 00:00:00.000 UDP 28.104.0.1:33580 -> 198.28.0.2:53 1 64 1 2025-11-14 12:28:10.100 00:00:00.000 UDP 28.104.0.1:34091 -> 198.28.0.2:53 1 64 1 2025-11-14 12:28:10.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34091 1 109 1 2025-11-14 12:28:10.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33580 1 80 1 2025-11-14 12:24:06.546 00:05:50.948 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 12:24:06.536 00:06:00.019 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 12:29:10.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40627 1 109 1 2025-11-14 12:29:10.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58482 1 80 1 2025-11-14 12:29:10.394 00:00:00.000 UDP 28.104.0.1:58482 -> 198.28.0.2:53 1 64 1 2025-11-14 12:29:10.394 00:00:00.000 UDP 28.104.0.1:40627 -> 198.28.0.2:53 1 64 1 2025-11-14 12:25:57.503 00:05:09.034 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 12:25:56.567 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2612 1 2025-11-14 12:30:10.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59408 1 109 1 2025-11-14 12:30:10.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36334 1 80 1 2025-11-14 12:30:10.692 00:00:00.000 UDP 28.104.0.1:36334 -> 198.28.0.2:53 1 64 1 2025-11-14 12:30:10.692 00:00:00.000 UDP 28.104.0.1:59408 -> 198.28.0.2:53 1 64 1 2025-11-14 12:31:10.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45815 1 109 1 2025-11-14 12:31:10.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33750 1 80 1 2025-11-14 12:31:10.984 00:00:00.000 UDP 28.104.0.1:33750 -> 198.28.0.2:53 1 64 1 2025-11-14 12:31:10.984 00:00:00.000 UDP 28.104.0.1:45815 -> 198.28.0.2:53 1 64 1 2025-11-14 12:27:06.586 00:05:50.909 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 12:32:11.278 00:00:00.000 UDP 28.104.0.1:57938 -> 198.28.0.2:53 1 64 1 2025-11-14 12:32:11.278 00:00:00.000 UDP 28.104.0.1:53064 -> 198.28.0.2:53 1 64 1 2025-11-14 12:32:11.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53064 1 80 1 2025-11-14 12:32:11.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57938 1 109 1 2025-11-14 12:32:23.720 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:33:11.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34925 1 109 1 2025-11-14 12:33:11.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57726 1 80 1 2025-11-14 12:28:06.536 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 12:33:11.577 00:00:00.000 UDP 28.104.0.1:34925 -> 198.28.0.2:53 1 64 1 2025-11-14 12:33:11.577 00:00:00.000 UDP 28.104.0.1:57726 -> 198.28.0.2:53 1 64 1 2025-11-14 12:29:57.544 00:05:09.035 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 12:34:11.869 00:00:00.000 UDP 28.104.0.1:49689 -> 198.28.0.2:53 1 64 1 2025-11-14 12:34:11.869 00:00:00.000 UDP 28.104.0.1:53940 -> 198.28.0.2:53 1 64 1 2025-11-14 12:34:11.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53940 1 109 1 2025-11-14 12:34:11.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49689 1 80 1 2025-11-14 12:30:06.546 00:05:50.948 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 12:35:12.147 00:00:00.000 UDP 28.104.0.1:33708 -> 198.28.0.2:53 1 64 1 2025-11-14 12:35:12.147 00:00:00.000 UDP 28.104.0.1:37036 -> 198.28.0.2:53 1 64 1 2025-11-14 12:35:12.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37036 1 109 1 2025-11-14 12:35:12.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33708 1 80 1 2025-11-14 12:31:16.573 00:05:10.026 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-11-14 12:31:57.504 00:05:09.038 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 12:31:06.538 00:06:00.017 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 12:36:12.433 00:00:00.000 UDP 28.104.0.1:48747 -> 198.28.0.2:53 1 64 1 2025-11-14 12:36:12.433 00:00:00.000 UDP 28.104.0.1:60602 -> 198.28.0.2:53 1 64 1 2025-11-14 12:36:12.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60602 1 80 1 2025-11-14 12:36:12.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48747 1 109 1 2025-11-14 12:37:12.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51346 1 80 1 2025-11-14 12:37:12.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51687 1 109 1 2025-11-14 12:37:12.726 00:00:00.000 UDP 28.104.0.1:51346 -> 198.28.0.2:53 1 64 1 2025-11-14 12:37:12.725 00:00:00.000 UDP 28.104.0.1:51687 -> 198.28.0.2:53 1 64 1 2025-11-14 12:37:23.826 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:33:06.588 00:05:50.906 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 12:38:13.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41154 1 80 1 2025-11-14 12:38:13.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55207 1 109 1 2025-11-14 12:38:13.055 00:00:00.000 UDP 28.104.0.1:41154 -> 198.28.0.2:53 1 64 1 2025-11-14 12:38:13.055 00:00:00.000 UDP 28.104.0.1:55207 -> 198.28.0.2:53 1 64 1 2025-11-14 12:39:13.308 00:00:00.000 UDP 28.104.0.1:39990 -> 198.28.0.2:53 1 64 1 2025-11-14 12:39:13.308 00:00:00.000 UDP 28.104.0.1:42686 -> 198.28.0.2:53 1 64 1 2025-11-14 12:39:13.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42686 1 109 1 2025-11-14 12:39:13.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39990 1 80 1 2025-11-14 12:35:06.542 00:06:00.118 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 12:35:57.545 00:05:09.035 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 12:40:14.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59046 1 80 1 2025-11-14 12:40:14.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59052 1 109 1 2025-11-14 12:40:14.077 00:00:00.000 UDP 28.104.0.1:59052 -> 198.28.0.2:53 1 64 1 2025-11-14 12:40:14.077 00:00:00.000 UDP 28.104.0.1:59046 -> 198.28.0.2:53 1 64 1 2025-11-14 12:36:36.600 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-14 12:36:06.551 00:05:50.945 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 12:41:14.388 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54291 1 80 1 2025-11-14 12:41:14.388 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35360 1 109 1 2025-11-14 12:41:14.378 00:00:00.000 UDP 28.104.0.1:54291 -> 198.28.0.2:53 1 64 1 2025-11-14 12:41:14.378 00:00:00.000 UDP 28.104.0.1:35360 -> 198.28.0.2:53 1 64 1 2025-11-14 12:37:57.504 00:05:09.038 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 12:42:14.671 00:00:00.000 UDP 28.104.0.1:59940 -> 198.28.0.2:53 1 64 1 2025-11-14 12:42:14.671 00:00:00.000 UDP 28.104.0.1:55790 -> 198.28.0.2:53 1 64 1 2025-11-14 12:42:14.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55790 1 109 1 2025-11-14 12:42:14.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59940 1 80 1 2025-11-14 12:42:24.329 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:38:06.541 00:06:00.020 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 12:43:14.964 00:00:00.000 UDP 28.104.0.1:58773 -> 198.28.0.2:53 1 64 1 2025-11-14 12:43:14.964 00:00:00.000 UDP 28.104.0.1:45279 -> 198.28.0.2:53 1 64 1 2025-11-14 12:43:14.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45279 1 109 1 2025-11-14 12:43:14.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58773 1 80 1 2025-11-14 12:39:06.589 00:05:50.912 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 12:44:15.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57172 1 109 1 2025-11-14 12:44:15.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37311 1 80 1 2025-11-14 12:44:15.260 00:00:00.000 UDP 28.104.0.1:37311 -> 198.28.0.2:53 1 64 1 2025-11-14 12:44:15.260 00:00:00.000 UDP 28.104.0.1:57172 -> 198.28.0.2:53 1 64 1 2025-11-14 12:45:15.518 00:00:00.000 UDP 28.104.0.1:49861 -> 198.28.0.2:53 1 64 1 2025-11-14 12:45:15.518 00:00:00.000 UDP 28.104.0.1:47175 -> 198.28.0.2:53 1 64 1 2025-11-14 12:45:15.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49861 1 109 1 2025-11-14 12:45:15.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47175 1 80 1 2025-11-14 12:41:57.547 00:05:09.035 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 12:41:56.610 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2540 1 2025-11-14 12:46:15.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37033 1 80 1 2025-11-14 12:46:15.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42254 1 109 1 2025-11-14 12:46:15.824 00:00:00.000 UDP 28.104.0.1:37033 -> 198.28.0.2:53 1 64 1 2025-11-14 12:46:15.824 00:00:00.000 UDP 28.104.0.1:42254 -> 198.28.0.2:53 1 64 1 2025-11-14 12:42:06.552 00:05:50.948 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 12:42:06.543 00:06:00.127 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 12:47:16.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56954 1 109 1 2025-11-14 12:47:16.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44477 1 80 1 2025-11-14 12:47:16.114 00:00:00.000 UDP 28.104.0.1:44477 -> 198.28.0.2:53 1 64 1 2025-11-14 12:47:16.114 00:00:00.000 UDP 28.104.0.1:56954 -> 198.28.0.2:53 1 64 1 2025-11-14 12:47:24.009 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:43:57.507 00:05:09.037 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 12:48:16.409 00:00:00.000 UDP 28.104.0.1:59483 -> 198.28.0.2:53 1 64 1 2025-11-14 12:48:16.409 00:00:00.000 UDP 28.104.0.1:46341 -> 198.28.0.2:53 1 64 1 2025-11-14 12:48:16.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46341 1 109 1 2025-11-14 12:48:16.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59483 1 80 1 2025-11-14 12:49:16.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51515 1 109 1 2025-11-14 12:49:16.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38354 1 80 1 2025-11-14 12:49:16.700 00:00:00.000 UDP 28.104.0.1:38354 -> 198.28.0.2:53 1 64 1 2025-11-14 12:49:16.700 00:00:00.000 UDP 28.104.0.1:51515 -> 198.28.0.2:53 1 64 1 2025-11-14 12:45:06.590 00:05:50.911 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 12:45:06.543 00:06:00.024 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 12:50:17.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46038 1 80 1 2025-11-14 12:50:17.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44484 1 109 1 2025-11-14 12:50:16.991 00:00:00.000 UDP 28.104.0.1:46038 -> 198.28.0.2:53 1 64 1 2025-11-14 12:50:16.991 00:00:00.000 UDP 28.104.0.1:44484 -> 198.28.0.2:53 1 64 1 2025-11-14 12:51:17.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42869 1 109 1 2025-11-14 12:51:17.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56918 1 80 1 2025-11-14 12:51:17.285 00:00:00.000 UDP 28.104.0.1:42869 -> 198.28.0.2:53 1 64 1 2025-11-14 12:51:17.284 00:00:00.000 UDP 28.104.0.1:56918 -> 198.28.0.2:53 1 64 1 2025-11-14 12:47:16.592 00:05:10.025 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2968 1 2025-11-14 12:47:57.550 00:05:09.033 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 12:52:17.577 00:00:00.000 UDP 28.104.0.1:51430 -> 198.28.0.2:53 1 64 1 2025-11-14 12:52:17.577 00:00:00.000 UDP 28.104.0.1:34340 -> 198.28.0.2:53 1 64 1 2025-11-14 12:52:17.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51430 1 109 1 2025-11-14 12:52:17.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34340 1 80 1 2025-11-14 12:52:24.033 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:48:06.563 00:05:50.939 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-14 12:53:17.872 00:00:00.000 UDP 28.104.0.1:46508 -> 198.28.0.2:53 1 64 1 2025-11-14 12:53:17.872 00:00:00.000 UDP 28.104.0.1:57895 -> 198.28.0.2:53 1 64 1 2025-11-14 12:53:17.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46508 1 80 1 2025-11-14 12:53:17.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57895 1 109 1 2025-11-14 12:49:06.543 00:06:00.125 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-14 12:49:57.511 00:05:09.033 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-14 12:54:18.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60471 1 80 1 2025-11-14 12:54:18.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52340 1 109 1 2025-11-14 12:54:18.183 00:00:00.000 UDP 28.104.0.1:52340 -> 198.28.0.2:53 1 64 1 2025-11-14 12:54:18.182 00:00:00.000 UDP 28.104.0.1:60471 -> 198.28.0.2:53 1 64 1 2025-11-14 12:55:18.488 00:00:00.000 UDP 28.104.0.1:39087 -> 198.28.0.2:53 1 64 1 2025-11-14 12:55:18.488 00:00:00.000 UDP 28.104.0.1:35510 -> 198.28.0.2:53 1 64 1 2025-11-14 12:55:18.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35510 1 109 1 2025-11-14 12:55:18.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39087 1 80 1 2025-11-14 12:51:06.595 00:05:50.907 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-14 12:56:18.790 00:00:00.000 UDP 28.104.0.1:35895 -> 198.28.0.2:53 1 64 1 2025-11-14 12:56:18.790 00:00:00.000 UDP 28.104.0.1:50028 -> 198.28.0.2:53 1 64 1 2025-11-14 12:56:18.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35895 1 109 1 2025-11-14 12:56:18.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50028 1 80 1 2025-11-14 12:52:36.616 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2788 1 2025-11-14 12:52:06.545 00:06:00.024 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-14 12:57:19.102 00:00:00.000 UDP 28.104.0.1:49061 -> 198.28.0.2:53 1 64 1 2025-11-14 12:57:19.102 00:00:00.000 UDP 28.104.0.1:53363 -> 198.28.0.2:53 1 64 1 2025-11-14 12:57:19.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53363 1 109 1 2025-11-14 12:57:19.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49061 1 80 1 2025-11-14 12:57:24.192 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-14 12:53:57.552 00:05:09.034 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-14 12:58:19.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35466 1 80 1 2025-11-14 12:58:19.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53790 1 109 1 2025-11-14 12:58:19.395 00:00:00.000 UDP 28.104.0.1:53790 -> 198.28.0.2:53 1 64 1 2025-11-14 12:58:19.395 00:00:00.000 UDP 28.104.0.1:35466 -> 198.28.0.2:53 1 64 1 Summary: total flows: 320, total bytes: 94561, total packets: 1393, avg bps: 193, avg pps: 0, avg bpp: 67 Time window: 2025-11-14 11:54:06 - 2025-11-14 12:59:06 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0048s User: 0.0029s Wall: 0.0037s flows/second: 85630.8 Runtime: 0.0038s