Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 09:59:13.255 00:00:00.000 UDP 28.104.0.1:40922 -> 198.28.0.2:53 1 64 1 2025-11-16 09:59:13.255 00:00:00.000 UDP 28.104.0.1:41232 -> 198.28.0.2:53 1 64 1 2025-11-16 09:59:13.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41232 1 80 1 2025-11-16 09:59:13.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40922 1 109 1 2025-11-16 09:55:07.529 00:05:50.937 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 10:00:13.547 00:00:00.000 UDP 28.104.0.1:45214 -> 198.28.0.2:53 1 64 1 2025-11-16 10:00:13.547 00:00:00.000 UDP 28.104.0.1:47319 -> 198.28.0.2:53 1 64 1 2025-11-16 10:00:13.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47319 1 109 1 2025-11-16 10:00:13.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45214 1 80 1 2025-11-16 09:56:58.455 00:05:09.340 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 10:01:13.847 00:00:00.000 UDP 28.104.0.1:45152 -> 198.28.0.2:53 1 64 1 2025-11-16 10:01:13.847 00:00:00.000 UDP 28.104.0.1:46716 -> 198.28.0.2:53 1 64 1 2025-11-16 10:01:13.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45152 1 80 1 2025-11-16 10:01:13.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46716 1 109 1 2025-11-16 10:02:14.168 00:00:00.000 UDP 28.104.0.1:54783 -> 198.28.0.2:53 1 64 1 2025-11-16 10:02:14.167 00:00:00.000 UDP 28.104.0.1:33156 -> 198.28.0.2:53 1 64 1 2025-11-16 10:02:14.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33156 1 109 1 2025-11-16 10:02:14.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54783 1 80 1 2025-11-16 10:03:15.001 00:00:00.000 UDP 28.104.0.1:52466 -> 198.28.0.2:53 1 64 1 2025-11-16 10:03:15.001 00:00:00.000 UDP 28.104.0.1:49690 -> 198.28.0.2:53 1 64 1 2025-11-16 10:03:15.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52466 1 109 1 2025-11-16 10:03:18.520 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:03:15.011 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49690 1 80 1 2025-11-16 09:59:20.358 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 3020 1 2025-11-16 09:59:07.542 00:05:50.916 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 09:59:58.506 00:05:09.283 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 10:04:15.298 00:00:00.000 UDP 28.104.0.1:43624 -> 198.28.0.2:53 1 64 1 2025-11-16 10:04:15.299 00:00:00.000 UDP 28.104.0.1:33157 -> 198.28.0.2:53 1 64 1 2025-11-16 10:04:15.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43624 1 109 1 2025-11-16 10:04:15.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33157 1 80 1 2025-11-16 10:00:07.532 00:06:00.359 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 10:00:07.532 00:06:00.035 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 10:05:15.598 00:00:00.000 UDP 28.104.0.1:33832 -> 198.28.0.2:53 1 64 1 2025-11-16 10:05:15.598 00:00:00.000 UDP 28.104.0.1:56535 -> 198.28.0.2:53 1 64 1 2025-11-16 10:05:15.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33832 1 80 1 2025-11-16 10:05:15.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56535 1 109 1 2025-11-16 10:01:07.531 00:05:50.937 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 10:06:15.897 00:00:00.000 UDP 28.104.0.1:60746 -> 198.28.0.2:53 1 64 1 2025-11-16 10:06:15.896 00:00:00.000 UDP 28.104.0.1:39531 -> 198.28.0.2:53 1 64 1 2025-11-16 10:06:15.907 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60746 1 109 1 2025-11-16 10:06:15.906 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39531 1 80 1 2025-11-16 10:02:58.456 00:05:09.344 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 10:07:16.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36206 1 80 1 2025-11-16 10:07:16.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50415 1 109 1 2025-11-16 10:07:16.212 00:00:00.000 UDP 28.104.0.1:36206 -> 198.28.0.2:53 1 64 1 2025-11-16 10:07:16.212 00:00:00.000 UDP 28.104.0.1:50415 -> 198.28.0.2:53 1 64 1 2025-11-16 10:08:18.391 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:08:16.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40097 1 80 1 2025-11-16 10:08:16.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45054 1 109 1 2025-11-16 10:08:16.518 00:00:00.000 UDP 28.104.0.1:45054 -> 198.28.0.2:53 1 64 1 2025-11-16 10:08:16.518 00:00:00.000 UDP 28.104.0.1:40097 -> 198.28.0.2:53 1 64 1 2025-11-16 10:04:40.362 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2820 1 2025-11-16 10:09:16.772 00:00:00.000 UDP 28.104.0.1:53805 -> 198.28.0.2:53 1 64 1 2025-11-16 10:09:16.772 00:00:00.000 UDP 28.104.0.1:40855 -> 198.28.0.2:53 1 64 1 2025-11-16 10:09:16.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40855 1 80 1 2025-11-16 10:09:16.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53805 1 109 1 2025-11-16 10:05:07.545 00:05:50.914 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 10:05:58.509 00:05:09.282 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 10:10:17.084 00:00:00.000 UDP 28.104.0.1:33523 -> 198.28.0.2:53 1 64 1 2025-11-16 10:10:17.084 00:00:00.000 UDP 28.104.0.1:34946 -> 198.28.0.2:53 1 64 1 2025-11-16 10:10:17.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34946 1 80 1 2025-11-16 10:10:17.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33523 1 109 1 2025-11-16 10:11:17.387 00:00:00.000 UDP 28.104.0.1:57962 -> 198.28.0.2:53 1 64 1 2025-11-16 10:11:17.387 00:00:00.000 UDP 28.104.0.1:46623 -> 198.28.0.2:53 1 64 1 2025-11-16 10:11:17.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57962 1 80 1 2025-11-16 10:11:17.397 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46623 1 109 1 2025-11-16 10:07:07.534 00:05:50.934 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 10:07:07.535 00:06:00.356 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 10:07:07.535 00:06:00.032 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 10:12:17.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43372 1 80 1 2025-11-16 10:12:17.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47935 1 109 1 2025-11-16 10:12:17.641 00:00:00.000 UDP 28.104.0.1:47935 -> 198.28.0.2:53 1 64 1 2025-11-16 10:12:17.641 00:00:00.000 UDP 28.104.0.1:43372 -> 198.28.0.2:53 1 64 1 2025-11-16 10:08:58.459 00:05:09.345 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 10:13:17.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60395 1 109 1 2025-11-16 10:13:17.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58623 1 80 1 2025-11-16 10:13:18.714 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:13:17.893 00:00:00.000 UDP 28.104.0.1:58623 -> 198.28.0.2:53 1 64 1 2025-11-16 10:13:17.893 00:00:00.000 UDP 28.104.0.1:60395 -> 198.28.0.2:53 1 64 1 2025-11-16 10:10:00.370 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-16 10:14:18.197 00:00:00.000 UDP 28.104.0.1:40010 -> 198.28.0.2:53 1 64 1 2025-11-16 10:14:18.197 00:00:00.000 UDP 28.104.0.1:46522 -> 198.28.0.2:53 1 64 1 2025-11-16 10:14:18.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40010 1 109 1 2025-11-16 10:14:18.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46522 1 80 1 2025-11-16 10:15:18.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48288 1 80 1 2025-11-16 10:15:18.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37713 1 109 1 2025-11-16 10:15:18.494 00:00:00.000 UDP 28.104.0.1:48288 -> 198.28.0.2:53 1 64 1 2025-11-16 10:15:18.494 00:00:00.000 UDP 28.104.0.1:37713 -> 198.28.0.2:53 1 64 1 2025-11-16 10:11:07.545 00:05:50.916 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 10:11:58.510 00:05:09.283 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 10:16:18.743 00:00:00.000 UDP 28.104.0.1:59304 -> 198.28.0.2:53 1 64 1 2025-11-16 10:16:18.744 00:00:00.000 UDP 28.104.0.1:52799 -> 198.28.0.2:53 1 64 1 2025-11-16 10:16:18.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52799 1 80 1 2025-11-16 10:16:18.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59304 1 109 1 2025-11-16 10:17:19.056 00:00:00.000 UDP 28.104.0.1:42363 -> 198.28.0.2:53 1 64 1 2025-11-16 10:17:19.056 00:00:00.000 UDP 28.104.0.1:45392 -> 198.28.0.2:53 1 64 1 2025-11-16 10:17:19.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45392 1 80 1 2025-11-16 10:17:19.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42363 1 109 1 2025-11-16 10:13:07.536 00:05:50.937 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 10:18:18.748 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:18:19.346 00:00:00.000 UDP 28.104.0.1:43138 -> 198.28.0.2:53 1 64 1 2025-11-16 10:18:19.346 00:00:00.000 UDP 28.104.0.1:43081 -> 198.28.0.2:53 1 64 1 2025-11-16 10:18:19.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43081 1 109 1 2025-11-16 10:18:19.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43138 1 80 1 2025-11-16 10:14:07.536 00:06:00.034 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 10:14:07.536 00:06:00.358 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 10:14:58.461 00:05:09.344 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 10:19:19.642 00:00:00.000 UDP 28.104.0.1:56367 -> 198.28.0.2:53 1 64 1 2025-11-16 10:19:19.642 00:00:00.000 UDP 28.104.0.1:36926 -> 198.28.0.2:53 1 64 1 2025-11-16 10:19:19.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56367 1 109 1 2025-11-16 10:19:19.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36926 1 80 1 2025-11-16 10:15:20.375 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-16 10:20:19.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58770 1 80 1 2025-11-16 10:20:19.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49722 1 109 1 2025-11-16 10:20:19.935 00:00:00.000 UDP 28.104.0.1:58770 -> 198.28.0.2:53 1 64 1 2025-11-16 10:20:19.935 00:00:00.000 UDP 28.104.0.1:49722 -> 198.28.0.2:53 1 64 1 2025-11-16 10:21:20.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54235 1 80 1 2025-11-16 10:21:20.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36891 1 109 1 2025-11-16 10:21:20.198 00:00:00.000 UDP 28.104.0.1:36891 -> 198.28.0.2:53 1 64 1 2025-11-16 10:21:20.198 00:00:00.000 UDP 28.104.0.1:54235 -> 198.28.0.2:53 1 64 1 2025-11-16 10:17:07.545 00:05:50.917 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 10:17:58.513 00:05:09.285 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 10:22:20.495 00:00:00.000 UDP 28.104.0.1:54416 -> 198.28.0.2:53 1 64 1 2025-11-16 10:22:20.495 00:00:00.000 UDP 28.104.0.1:34606 -> 198.28.0.2:53 1 64 1 2025-11-16 10:22:20.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54416 1 80 1 2025-11-16 10:22:20.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34606 1 109 1 2025-11-16 10:23:18.883 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:23:20.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46692 1 109 1 2025-11-16 10:23:20.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45191 1 80 1 2025-11-16 10:23:20.791 00:00:00.000 UDP 28.104.0.1:45191 -> 198.28.0.2:53 1 64 1 2025-11-16 10:23:20.791 00:00:00.000 UDP 28.104.0.1:46692 -> 198.28.0.2:53 1 64 1 2025-11-16 10:19:07.542 00:05:50.932 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 10:24:21.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50043 1 80 1 2025-11-16 10:24:21.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41004 1 109 1 2025-11-16 10:24:21.888 00:00:00.000 UDP 28.104.0.1:50043 -> 198.28.0.2:53 1 64 1 2025-11-16 10:24:21.888 00:00:00.000 UDP 28.104.0.1:41004 -> 198.28.0.2:53 1 64 1 2025-11-16 10:20:40.384 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-16 10:20:58.462 00:05:09.345 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 10:25:22.165 00:00:00.000 UDP 28.104.0.1:54364 -> 198.28.0.2:53 1 64 1 2025-11-16 10:25:22.165 00:00:00.000 UDP 28.104.0.1:51718 -> 198.28.0.2:53 1 64 1 2025-11-16 10:25:22.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51718 1 80 1 2025-11-16 10:25:22.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54364 1 109 1 2025-11-16 10:21:07.540 00:06:00.356 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 10:21:07.540 00:06:00.034 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 10:26:22.473 00:00:00.000 UDP 28.104.0.1:50697 -> 198.28.0.2:53 1 64 1 2025-11-16 10:26:22.473 00:00:00.000 UDP 28.104.0.1:52250 -> 198.28.0.2:53 1 64 1 2025-11-16 10:26:22.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50697 1 80 1 2025-11-16 10:26:22.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52250 1 109 1 2025-11-16 10:27:22.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49209 1 80 1 2025-11-16 10:27:22.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55184 1 109 1 2025-11-16 10:27:22.771 00:00:00.000 UDP 28.104.0.1:49209 -> 198.28.0.2:53 1 64 1 2025-11-16 10:27:22.771 00:00:00.000 UDP 28.104.0.1:55184 -> 198.28.0.2:53 1 64 1 2025-11-16 10:23:07.550 00:05:50.915 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 10:23:58.513 00:05:09.286 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 10:28:23.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57443 1 80 1 2025-11-16 10:28:19.042 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:28:23.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48971 1 109 1 2025-11-16 10:28:23.085 00:00:00.000 UDP 28.104.0.1:57443 -> 198.28.0.2:53 1 64 1 2025-11-16 10:28:23.085 00:00:00.000 UDP 28.104.0.1:48971 -> 198.28.0.2:53 1 64 1 2025-11-16 10:29:23.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55240 1 80 1 2025-11-16 10:29:23.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50459 1 109 1 2025-11-16 10:29:23.389 00:00:00.000 UDP 28.104.0.1:50459 -> 198.28.0.2:53 1 64 1 2025-11-16 10:29:23.389 00:00:00.000 UDP 28.104.0.1:55240 -> 198.28.0.2:53 1 64 1 2025-11-16 10:25:07.542 00:05:50.933 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 10:26:00.390 00:05:10.030 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 3020 1 2025-11-16 10:30:28.305 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60010 1 109 1 2025-11-16 10:30:28.305 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43430 1 80 1 2025-11-16 10:30:28.294 00:00:00.000 UDP 28.104.0.1:43430 -> 198.28.0.2:53 1 64 1 2025-11-16 10:30:28.294 00:00:00.000 UDP 28.104.0.1:60010 -> 198.28.0.2:53 1 64 1 2025-11-16 10:26:58.465 00:05:09.345 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 10:31:28.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55229 1 80 1 2025-11-16 10:31:28.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39527 1 109 1 2025-11-16 10:31:28.562 00:00:00.000 UDP 28.104.0.1:39527 -> 198.28.0.2:53 1 64 1 2025-11-16 10:31:28.562 00:00:00.000 UDP 28.104.0.1:55229 -> 198.28.0.2:53 1 64 1 2025-11-16 10:32:28.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48291 1 109 1 2025-11-16 10:32:28.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37359 1 80 1 2025-11-16 10:32:28.845 00:00:00.000 UDP 28.104.0.1:37359 -> 198.28.0.2:53 1 64 1 2025-11-16 10:32:28.845 00:00:00.000 UDP 28.104.0.1:48291 -> 198.28.0.2:53 1 64 1 2025-11-16 10:28:07.545 00:06:00.032 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 10:28:07.545 00:06:00.353 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 10:33:19.652 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:33:29.176 00:00:00.000 UDP 28.104.0.1:44463 -> 198.28.0.2:53 1 64 1 2025-11-16 10:33:29.176 00:00:00.000 UDP 28.104.0.1:56060 -> 198.28.0.2:53 1 64 1 2025-11-16 10:33:29.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56060 1 80 1 2025-11-16 10:33:29.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44463 1 109 1 2025-11-16 10:29:07.555 00:05:50.911 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 10:29:58.515 00:05:09.285 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 10:34:29.478 00:00:00.000 UDP 28.104.0.1:60848 -> 198.28.0.2:53 1 64 1 2025-11-16 10:34:29.478 00:00:00.000 UDP 28.104.0.1:47043 -> 198.28.0.2:53 1 64 1 2025-11-16 10:34:29.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60848 1 80 1 2025-11-16 10:34:29.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47043 1 109 1 2025-11-16 10:35:29.729 00:00:00.000 UDP 28.104.0.1:40492 -> 198.28.0.2:53 1 64 1 2025-11-16 10:35:29.730 00:00:00.000 UDP 28.104.0.1:53577 -> 198.28.0.2:53 1 64 1 2025-11-16 10:31:20.397 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2732 1 2025-11-16 10:35:29.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53577 1 80 1 2025-11-16 10:35:29.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40492 1 109 1 2025-11-16 10:31:07.544 00:05:50.931 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 10:36:30.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42047 1 109 1 2025-11-16 10:36:30.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53403 1 80 1 2025-11-16 10:36:30.050 00:00:00.000 UDP 28.104.0.1:53403 -> 198.28.0.2:53 1 64 1 2025-11-16 10:36:30.049 00:00:00.000 UDP 28.104.0.1:42047 -> 198.28.0.2:53 1 64 1 2025-11-16 10:32:58.465 00:05:09.345 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 10:37:30.344 00:00:00.000 UDP 28.104.0.1:35337 -> 198.28.0.2:53 1 64 1 2025-11-16 10:37:30.344 00:00:00.000 UDP 28.104.0.1:55435 -> 198.28.0.2:53 1 64 1 2025-11-16 10:37:30.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55435 1 109 1 2025-11-16 10:37:30.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35337 1 80 1 2025-11-16 10:38:19.197 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:38:30.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34276 1 109 1 2025-11-16 10:38:30.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45237 1 80 1 2025-11-16 10:38:30.640 00:00:00.000 UDP 28.104.0.1:45237 -> 198.28.0.2:53 1 64 1 2025-11-16 10:38:30.640 00:00:00.000 UDP 28.104.0.1:34276 -> 198.28.0.2:53 1 64 1 2025-11-16 10:39:30.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41455 1 109 1 2025-11-16 10:39:30.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46787 1 80 1 2025-11-16 10:39:30.899 00:00:00.000 UDP 28.104.0.1:46787 -> 198.28.0.2:53 1 64 1 2025-11-16 10:39:30.898 00:00:00.000 UDP 28.104.0.1:41455 -> 198.28.0.2:53 1 64 1 2025-11-16 10:35:07.555 00:05:50.915 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 10:35:07.545 00:06:00.353 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 10:35:58.517 00:05:09.285 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 10:35:07.545 00:06:00.032 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 10:40:31.211 00:00:00.000 UDP 28.104.0.1:44970 -> 198.28.0.2:53 1 64 1 2025-11-16 10:40:31.211 00:00:00.000 UDP 28.104.0.1:42912 -> 198.28.0.2:53 1 64 1 2025-11-16 10:40:31.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42912 1 80 1 2025-11-16 10:40:31.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44970 1 109 1 2025-11-16 10:36:40.400 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-16 10:41:31.508 00:00:00.000 UDP 28.104.0.1:48312 -> 198.28.0.2:53 1 64 1 2025-11-16 10:41:31.508 00:00:00.000 UDP 28.104.0.1:39848 -> 198.28.0.2:53 1 64 1 2025-11-16 10:41:31.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48312 1 80 1 2025-11-16 10:41:31.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39848 1 109 1 2025-11-16 10:37:07.545 00:05:50.933 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 10:42:31.805 00:00:00.000 UDP 28.104.0.1:40880 -> 198.28.0.2:53 1 64 1 2025-11-16 10:42:31.805 00:00:00.000 UDP 28.104.0.1:39145 -> 198.28.0.2:53 1 64 1 2025-11-16 10:42:31.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40880 1 109 1 2025-11-16 10:42:31.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39145 1 80 1 2025-11-16 10:38:58.468 00:05:09.343 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 10:43:19.270 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:43:32.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42915 1 109 1 2025-11-16 10:43:32.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41370 1 80 1 2025-11-16 10:43:32.171 00:00:00.000 UDP 28.104.0.1:42915 -> 198.28.0.2:53 1 64 1 2025-11-16 10:43:32.171 00:00:00.000 UDP 28.104.0.1:41370 -> 198.28.0.2:53 1 64 1 2025-11-16 10:44:32.439 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48021 1 109 1 2025-11-16 10:44:32.439 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44838 1 80 1 2025-11-16 10:44:32.428 00:00:00.000 UDP 28.104.0.1:48021 -> 198.28.0.2:53 1 64 1 2025-11-16 10:44:32.428 00:00:00.000 UDP 28.104.0.1:44838 -> 198.28.0.2:53 1 64 1 2025-11-16 10:45:32.737 00:00:00.000 UDP 28.104.0.1:41577 -> 198.28.0.2:53 1 64 1 2025-11-16 10:45:32.737 00:00:00.000 UDP 28.104.0.1:41586 -> 198.28.0.2:53 1 64 1 2025-11-16 10:45:32.748 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41586 1 109 1 2025-11-16 10:45:32.751 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41577 1 80 1 2025-11-16 10:41:07.556 00:05:50.913 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 10:41:58.518 00:05:09.284 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 10:42:00.410 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-11-16 10:46:33.055 00:00:00.000 UDP 28.104.0.1:47968 -> 198.28.0.2:53 1 64 1 2025-11-16 10:46:33.055 00:00:00.000 UDP 28.104.0.1:38967 -> 198.28.0.2:53 1 64 1 2025-11-16 10:46:33.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47968 1 109 1 2025-11-16 10:46:33.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38967 1 80 1 2025-11-16 10:42:07.548 00:06:00.034 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 10:42:07.549 00:06:00.350 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 10:47:33.362 00:00:00.000 UDP 28.104.0.1:46924 -> 198.28.0.2:53 1 64 1 2025-11-16 10:47:33.362 00:00:00.000 UDP 28.104.0.1:36672 -> 198.28.0.2:53 1 64 1 2025-11-16 10:47:33.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46924 1 109 1 2025-11-16 10:47:33.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36672 1 80 1 2025-11-16 10:43:07.547 00:05:50.933 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 10:48:19.349 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:48:33.610 00:00:00.000 UDP 28.104.0.1:43430 -> 198.28.0.2:53 1 64 1 2025-11-16 10:48:33.610 00:00:00.000 UDP 28.104.0.1:33552 -> 198.28.0.2:53 1 64 1 2025-11-16 10:48:33.621 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33552 1 109 1 2025-11-16 10:48:33.621 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43430 1 80 1 2025-11-16 10:44:58.469 00:05:09.345 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 10:49:33.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46388 1 109 1 2025-11-16 10:49:33.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33969 1 80 1 2025-11-16 10:49:33.905 00:00:00.000 UDP 28.104.0.1:33969 -> 198.28.0.2:53 1 64 1 2025-11-16 10:49:33.905 00:00:00.000 UDP 28.104.0.1:46388 -> 198.28.0.2:53 1 64 1 2025-11-16 10:50:34.192 00:00:00.000 UDP 28.104.0.1:48787 -> 198.28.0.2:53 1 64 1 2025-11-16 10:50:34.192 00:00:00.000 UDP 28.104.0.1:53108 -> 198.28.0.2:53 1 64 1 2025-11-16 10:50:34.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53108 1 80 1 2025-11-16 10:50:34.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48787 1 109 1 2025-11-16 10:47:20.419 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-16 10:51:34.502 00:00:00.000 UDP 28.104.0.1:46273 -> 198.28.0.2:53 1 64 1 2025-11-16 10:51:34.502 00:00:00.000 UDP 28.104.0.1:39307 -> 198.28.0.2:53 1 64 1 2025-11-16 10:51:34.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46273 1 109 1 2025-11-16 10:51:34.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39307 1 80 1 2025-11-16 10:47:07.558 00:05:50.914 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 10:47:58.519 00:05:09.286 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 10:52:34.760 00:00:00.000 UDP 28.104.0.1:41587 -> 198.28.0.2:53 1 64 1 2025-11-16 10:52:34.760 00:00:00.000 UDP 28.104.0.1:50792 -> 198.28.0.2:53 1 64 1 2025-11-16 10:52:34.771 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50792 1 109 1 2025-11-16 10:52:34.771 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41587 1 80 1 2025-11-16 10:53:19.275 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:53:35.086 00:00:00.000 UDP 28.104.0.1:43612 -> 198.28.0.2:53 1 64 1 2025-11-16 10:53:35.086 00:00:00.000 UDP 28.104.0.1:36929 -> 198.28.0.2:53 1 64 1 2025-11-16 10:53:35.097 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36929 1 80 1 2025-11-16 10:53:35.097 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43612 1 109 1 2025-11-16 10:49:07.550 00:05:50.932 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 10:49:07.549 00:06:00.353 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 10:49:07.549 00:06:00.031 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 10:54:35.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51328 1 80 1 2025-11-16 10:54:35.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40087 1 109 1 2025-11-16 10:54:35.381 00:00:00.000 UDP 28.104.0.1:51328 -> 198.28.0.2:53 1 64 1 2025-11-16 10:54:35.381 00:00:00.000 UDP 28.104.0.1:40087 -> 198.28.0.2:53 1 64 1 2025-11-16 10:50:58.470 00:05:09.346 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 10:55:35.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47623 1 109 1 2025-11-16 10:55:35.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42354 1 80 1 2025-11-16 10:55:35.678 00:00:00.000 UDP 28.104.0.1:42354 -> 198.28.0.2:53 1 64 1 2025-11-16 10:55:35.678 00:00:00.000 UDP 28.104.0.1:47623 -> 198.28.0.2:53 1 64 1 2025-11-16 10:56:35.978 00:00:00.000 UDP 28.104.0.1:41084 -> 198.28.0.2:53 1 64 1 2025-11-16 10:56:35.978 00:00:00.000 UDP 28.104.0.1:55617 -> 198.28.0.2:53 1 64 1 2025-11-16 10:56:35.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55617 1 80 1 2025-11-16 10:56:35.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41084 1 109 1 2025-11-16 10:52:40.429 00:05:11.226 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2520 1 2025-11-16 10:57:36.341 00:00:00.000 UDP 28.104.0.1:53944 -> 198.28.0.2:53 1 64 1 2025-11-16 10:57:36.341 00:00:00.000 UDP 28.104.0.1:53872 -> 198.28.0.2:53 1 64 1 2025-11-16 10:57:36.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53944 1 80 1 2025-11-16 10:57:36.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53872 1 109 1 2025-11-16 10:53:07.561 00:05:50.913 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 10:53:58.521 00:05:09.324 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 10:58:19.385 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 10:58:36.646 00:00:00.000 UDP 28.104.0.1:50330 -> 198.28.0.2:53 1 64 1 2025-11-16 10:58:36.646 00:00:00.000 UDP 28.104.0.1:41681 -> 198.28.0.2:53 1 64 1 2025-11-16 10:58:36.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41681 1 109 1 2025-11-16 10:58:36.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50330 1 80 1 Summary: total flows: 319, total bytes: 93868, total packets: 1381, avg bps: 195, avg pps: 0, avg bpp: 67 Time window: 2025-11-16 09:55:07 - 2025-11-16 10:59:07 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0041s User: 0.0016s Wall: 0.0033s flows/second: 97407.0 Runtime: 0.0033s