Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 13:58:59.326 00:00:00.000 UDP 28.104.0.1:44598 -> 198.28.0.2:53 1 64 1 2025-11-16 13:58:59.325 00:00:00.000 UDP 28.104.0.1:36178 -> 198.28.0.2:53 1 64 1 2025-11-16 13:58:59.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44598 1 109 1 2025-11-16 13:58:59.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36178 1 80 1 2025-11-16 13:59:59.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54910 1 109 1 2025-11-16 13:59:59.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58108 1 80 1 2025-11-16 13:55:07.607 00:05:50.944 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 13:59:59.581 00:00:00.000 UDP 28.104.0.1:58108 -> 198.28.0.2:53 1 64 1 2025-11-16 13:59:59.581 00:00:00.000 UDP 28.104.0.1:54910 -> 198.28.0.2:53 1 64 1 2025-11-16 14:00:59.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38370 1 109 1 2025-11-16 14:00:59.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58813 1 80 1 2025-11-16 14:00:59.873 00:00:00.000 UDP 28.104.0.1:58813 -> 198.28.0.2:53 1 64 1 2025-11-16 14:00:59.873 00:00:00.000 UDP 28.104.0.1:38370 -> 198.28.0.2:53 1 64 1 2025-11-16 13:56:58.521 00:05:09.380 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 14:02:00.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45190 1 109 1 2025-11-16 14:02:00.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36428 1 80 1 2025-11-16 14:02:00.184 00:00:00.000 UDP 28.104.0.1:45190 -> 198.28.0.2:53 1 64 1 2025-11-16 14:02:00.184 00:00:00.000 UDP 28.104.0.1:36428 -> 198.28.0.2:53 1 64 1 2025-11-16 14:03:00.530 00:00:00.000 UDP 28.104.0.1:39685 -> 198.28.0.2:53 1 64 1 2025-11-16 14:03:00.530 00:00:00.000 UDP 28.104.0.1:55127 -> 198.28.0.2:53 1 64 1 2025-11-16 14:03:00.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39685 1 109 1 2025-11-16 14:03:00.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55127 1 80 1 2025-11-16 13:58:07.609 00:06:00.070 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 13:58:07.609 00:06:00.378 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 14:03:23.140 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 13:59:10.673 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-16 14:04:00.827 00:00:00.000 UDP 28.104.0.1:60332 -> 198.28.0.2:53 1 64 1 2025-11-16 14:04:00.827 00:00:00.000 UDP 28.104.0.1:60431 -> 198.28.0.2:53 1 64 1 2025-11-16 14:04:00.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60431 1 109 1 2025-11-16 13:59:07.619 00:05:50.923 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 14:04:00.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60332 1 80 1 2025-11-16 13:59:58.572 00:05:09.328 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 14:05:01.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55143 1 80 1 2025-11-16 14:05:01.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44761 1 109 1 2025-11-16 14:05:01.127 00:00:00.000 UDP 28.104.0.1:44761 -> 198.28.0.2:53 1 64 1 2025-11-16 14:05:01.127 00:00:00.000 UDP 28.104.0.1:55143 -> 198.28.0.2:53 1 64 1 2025-11-16 14:01:07.611 00:05:50.942 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 14:06:01.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35829 1 80 1 2025-11-16 14:06:01.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50095 1 109 1 2025-11-16 14:06:01.426 00:00:00.000 UDP 28.104.0.1:50095 -> 198.28.0.2:53 1 64 1 2025-11-16 14:06:01.426 00:00:00.000 UDP 28.104.0.1:35829 -> 198.28.0.2:53 1 64 1 2025-11-16 14:07:01.677 00:00:00.000 UDP 28.104.0.1:46094 -> 198.28.0.2:53 1 64 1 2025-11-16 14:07:01.676 00:00:00.000 UDP 28.104.0.1:60694 -> 198.28.0.2:53 1 64 1 2025-11-16 14:07:01.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60694 1 80 1 2025-11-16 14:07:01.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46094 1 109 1 2025-11-16 14:02:58.543 00:05:09.368 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 14:08:01.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54561 1 109 1 2025-11-16 14:08:01.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39506 1 80 1 2025-11-16 14:08:01.984 00:00:00.000 UDP 28.104.0.1:39506 -> 198.28.0.2:53 1 64 1 2025-11-16 14:08:01.984 00:00:00.000 UDP 28.104.0.1:54561 -> 198.28.0.2:53 1 64 1 2025-11-16 14:08:23.404 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 14:04:30.676 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-16 14:09:02.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37962 1 109 1 2025-11-16 14:09:02.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33413 1 80 1 2025-11-16 14:09:02.285 00:00:00.000 UDP 28.104.0.1:33413 -> 198.28.0.2:53 1 64 1 2025-11-16 14:09:02.284 00:00:00.000 UDP 28.104.0.1:37962 -> 198.28.0.2:53 1 64 1 2025-11-16 14:05:07.622 00:05:50.925 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 14:10:02.586 00:00:00.000 UDP 28.104.0.1:39644 -> 198.28.0.2:53 1 64 1 2025-11-16 14:10:02.586 00:00:00.000 UDP 28.104.0.1:44287 -> 198.28.0.2:53 1 64 1 2025-11-16 14:10:02.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39644 1 109 1 2025-11-16 14:10:02.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44287 1 80 1 2025-11-16 14:05:07.613 00:06:00.375 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 14:05:58.594 00:05:09.308 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 14:05:07.613 00:06:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 14:11:02.932 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41577 1 109 1 2025-11-16 14:11:02.932 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47848 1 80 1 2025-11-16 14:11:02.921 00:00:00.000 UDP 28.104.0.1:41577 -> 198.28.0.2:53 1 64 1 2025-11-16 14:11:02.921 00:00:00.000 UDP 28.104.0.1:47848 -> 198.28.0.2:53 1 64 1 2025-11-16 14:12:03.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58374 1 80 1 2025-11-16 14:12:03.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36664 1 109 1 2025-11-16 14:12:03.235 00:00:00.000 UDP 28.104.0.1:36664 -> 198.28.0.2:53 1 64 1 2025-11-16 14:07:07.612 00:05:50.945 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 14:12:03.236 00:00:00.000 UDP 28.104.0.1:58374 -> 198.28.0.2:53 1 64 1 2025-11-16 14:13:03.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60211 1 109 1 2025-11-16 14:13:03.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51910 1 80 1 2025-11-16 14:13:03.555 00:00:00.000 UDP 28.104.0.1:51910 -> 198.28.0.2:53 1 64 1 2025-11-16 14:13:03.555 00:00:00.000 UDP 28.104.0.1:60211 -> 198.28.0.2:53 1 64 1 2025-11-16 14:08:58.543 00:05:09.369 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 14:13:23.263 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 14:14:03.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47435 1 80 1 2025-11-16 14:14:03.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47604 1 109 1 2025-11-16 14:09:50.684 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-16 14:14:03.848 00:00:00.000 UDP 28.104.0.1:47435 -> 198.28.0.2:53 1 64 1 2025-11-16 14:14:03.848 00:00:00.000 UDP 28.104.0.1:47604 -> 198.28.0.2:53 1 64 1 2025-11-16 14:15:04.192 00:00:00.000 UDP 28.104.0.1:53494 -> 198.28.0.2:53 1 64 1 2025-11-16 14:15:04.192 00:00:00.000 UDP 28.104.0.1:56418 -> 198.28.0.2:53 1 64 1 2025-11-16 14:15:04.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56418 1 109 1 2025-11-16 14:15:04.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53494 1 80 1 2025-11-16 14:11:07.625 00:05:50.924 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 14:16:04.512 00:00:00.000 UDP 28.104.0.1:44703 -> 198.28.0.2:53 1 64 1 2025-11-16 14:11:58.597 00:05:09.304 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 14:16:04.512 00:00:00.000 UDP 28.104.0.1:35099 -> 198.28.0.2:53 1 64 1 2025-11-16 14:16:04.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44703 1 109 1 2025-11-16 14:16:04.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35099 1 80 1 2025-11-16 14:17:04.829 00:00:00.000 UDP 28.104.0.1:34792 -> 198.28.0.2:53 1 64 1 2025-11-16 14:12:07.613 00:06:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 14:12:07.613 00:06:00.376 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 14:17:04.829 00:00:00.000 UDP 28.104.0.1:42402 -> 198.28.0.2:53 1 64 1 2025-11-16 14:17:04.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42402 1 80 1 2025-11-16 14:17:04.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34792 1 109 1 2025-11-16 14:13:07.613 00:05:50.945 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 14:18:05.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41534 1 80 1 2025-11-16 14:18:05.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33958 1 109 1 2025-11-16 14:18:05.182 00:00:00.000 UDP 28.104.0.1:41534 -> 198.28.0.2:53 1 64 1 2025-11-16 14:18:05.181 00:00:00.000 UDP 28.104.0.1:33958 -> 198.28.0.2:53 1 64 1 2025-11-16 14:18:23.696 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 14:14:58.549 00:05:09.365 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 14:19:05.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42626 1 109 1 2025-11-16 14:19:05.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37851 1 80 1 2025-11-16 14:19:05.487 00:00:00.000 UDP 28.104.0.1:37851 -> 198.28.0.2:53 1 64 1 2025-11-16 14:19:05.486 00:00:00.000 UDP 28.104.0.1:42626 -> 198.28.0.2:53 1 64 1 2025-11-16 14:15:10.686 00:05:10.015 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2780 1 2025-11-16 14:20:05.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38222 1 80 1 2025-11-16 14:20:05.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53966 1 109 1 2025-11-16 14:20:05.796 00:00:00.000 UDP 28.104.0.1:53966 -> 198.28.0.2:53 1 64 1 2025-11-16 14:20:05.796 00:00:00.000 UDP 28.104.0.1:38222 -> 198.28.0.2:53 1 64 1 2025-11-16 14:21:06.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58362 1 109 1 2025-11-16 14:21:06.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54661 1 80 1 2025-11-16 14:21:06.101 00:00:00.000 UDP 28.104.0.1:58362 -> 198.28.0.2:53 1 64 1 2025-11-16 14:21:06.101 00:00:00.000 UDP 28.104.0.1:54661 -> 198.28.0.2:53 1 64 1 2025-11-16 14:17:07.624 00:05:50.924 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 14:22:06.399 00:00:00.000 UDP 28.104.0.1:40058 -> 198.28.0.2:53 1 64 1 2025-11-16 14:17:58.600 00:05:09.310 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 14:22:06.399 00:00:00.000 UDP 28.104.0.1:44617 -> 198.28.0.2:53 1 64 1 2025-11-16 14:22:06.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40058 1 109 1 2025-11-16 14:22:06.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44617 1 80 1 2025-11-16 14:23:06.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60230 1 80 1 2025-11-16 14:23:06.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54684 1 109 1 2025-11-16 14:23:06.699 00:00:00.000 UDP 28.104.0.1:54684 -> 198.28.0.2:53 1 64 1 2025-11-16 14:23:06.700 00:00:00.000 UDP 28.104.0.1:60230 -> 198.28.0.2:53 1 64 1 2025-11-16 14:23:23.637 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 14:19:07.615 00:05:50.946 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 14:19:07.616 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 14:19:07.616 00:06:00.383 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-16 14:24:07.002 00:00:00.000 UDP 28.104.0.1:53440 -> 198.28.0.2:53 1 64 1 2025-11-16 14:24:07.002 00:00:00.000 UDP 28.104.0.1:47615 -> 198.28.0.2:53 1 64 1 2025-11-16 14:24:07.012 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47615 1 109 1 2025-11-16 14:24:07.012 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53440 1 80 1 2025-11-16 14:20:30.692 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2972 1 2025-11-16 14:25:07.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35313 1 109 1 2025-11-16 14:25:07.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37235 1 80 1 2025-11-16 14:20:58.548 00:05:09.372 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 14:25:07.311 00:00:00.000 UDP 28.104.0.1:35313 -> 198.28.0.2:53 1 64 1 2025-11-16 14:25:07.312 00:00:00.000 UDP 28.104.0.1:37235 -> 198.28.0.2:53 1 64 1 2025-11-16 14:26:07.617 00:00:00.000 UDP 28.104.0.1:59142 -> 198.28.0.2:53 1 64 1 2025-11-16 14:26:07.617 00:00:00.000 UDP 28.104.0.1:36847 -> 198.28.0.2:53 1 64 1 2025-11-16 14:26:07.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59142 1 109 1 2025-11-16 14:26:07.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36847 1 80 1 2025-11-16 14:27:07.911 00:00:00.000 UDP 28.104.0.1:40722 -> 198.28.0.2:53 1 64 1 2025-11-16 14:27:07.911 00:00:00.000 UDP 28.104.0.1:41049 -> 198.28.0.2:53 1 64 1 2025-11-16 14:27:07.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41049 1 109 1 2025-11-16 14:27:07.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40722 1 80 1 2025-11-16 14:23:07.625 00:05:50.926 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 14:23:58.601 00:05:09.310 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 14:28:08.219 00:00:00.000 UDP 28.104.0.1:42493 -> 198.28.0.2:53 1 64 1 2025-11-16 14:28:08.219 00:00:00.000 UDP 28.104.0.1:51823 -> 198.28.0.2:53 1 64 1 2025-11-16 14:28:08.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42493 1 80 1 2025-11-16 14:28:08.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51823 1 109 1 2025-11-16 14:28:23.919 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 14:29:08.514 00:00:00.000 UDP 28.104.0.1:39218 -> 198.28.0.2:53 1 64 1 2025-11-16 14:29:08.514 00:00:00.000 UDP 28.104.0.1:39111 -> 198.28.0.2:53 1 64 1 2025-11-16 14:29:08.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39111 1 80 1 2025-11-16 14:29:08.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39218 1 109 1 2025-11-16 14:25:07.619 00:05:50.943 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 14:25:50.697 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2656 1 2025-11-16 14:30:08.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44418 1 109 1 2025-11-16 14:30:08.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48389 1 80 1 2025-11-16 14:26:07.619 00:05:00.383 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 14:30:08.762 00:00:00.000 UDP 28.104.0.1:48389 -> 198.28.0.2:53 1 64 1 2025-11-16 14:30:08.762 00:00:00.000 UDP 28.104.0.1:44418 -> 198.28.0.2:53 1 64 1 2025-11-16 14:26:58.551 00:05:09.372 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 14:26:07.619 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 14:31:09.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40895 1 109 1 2025-11-16 14:31:09.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55623 1 80 1 2025-11-16 14:31:09.075 00:00:00.000 UDP 28.104.0.1:40895 -> 198.28.0.2:53 1 64 1 2025-11-16 14:31:09.075 00:00:00.000 UDP 28.104.0.1:55623 -> 198.28.0.2:53 1 64 1 2025-11-16 14:32:09.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57867 1 80 1 2025-11-16 14:32:09.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55401 1 109 1 2025-11-16 14:32:09.336 00:00:00.000 UDP 28.104.0.1:57867 -> 198.28.0.2:53 1 64 1 2025-11-16 14:32:09.336 00:00:00.000 UDP 28.104.0.1:55401 -> 198.28.0.2:53 1 64 1 2025-11-16 14:33:09.635 00:00:00.000 UDP 28.104.0.1:50008 -> 198.28.0.2:53 1 64 1 2025-11-16 14:33:09.635 00:00:00.000 UDP 28.104.0.1:37126 -> 198.28.0.2:53 1 64 1 2025-11-16 14:33:09.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37126 1 80 1 2025-11-16 14:33:09.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50008 1 109 1 2025-11-16 14:33:23.681 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 14:29:07.629 00:05:50.923 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 14:29:58.603 00:05:09.312 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 14:34:09.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43071 1 109 1 2025-11-16 14:34:09.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56842 1 80 1 2025-11-16 14:34:09.923 00:00:00.000 UDP 28.104.0.1:43071 -> 198.28.0.2:53 1 64 1 2025-11-16 14:34:09.923 00:00:00.000 UDP 28.104.0.1:56842 -> 198.28.0.2:53 1 64 1 2025-11-16 14:35:10.249 00:00:00.000 UDP 28.104.0.1:53235 -> 198.28.0.2:53 1 64 1 2025-11-16 14:35:10.249 00:00:00.000 UDP 28.104.0.1:58888 -> 198.28.0.2:53 1 64 1 2025-11-16 14:35:10.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58888 1 109 1 2025-11-16 14:35:10.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53235 1 80 1 2025-11-16 14:31:10.701 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-16 14:31:07.620 00:05:50.942 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 14:32:07.622 00:05:00.387 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 14:36:10.540 00:00:00.000 UDP 28.104.0.1:55846 -> 198.28.0.2:53 1 64 1 2025-11-16 14:36:10.540 00:00:00.000 UDP 28.104.0.1:58489 -> 198.28.0.2:53 1 64 1 2025-11-16 14:36:10.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58489 1 80 1 2025-11-16 14:36:10.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55846 1 109 1 2025-11-16 14:32:58.553 00:05:09.373 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 14:37:10.838 00:00:00.000 UDP 28.104.0.1:43464 -> 198.28.0.2:53 1 64 1 2025-11-16 14:37:10.838 00:00:00.000 UDP 28.104.0.1:34566 -> 198.28.0.2:53 1 64 1 2025-11-16 14:37:10.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34566 1 109 1 2025-11-16 14:37:10.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43464 1 80 1 2025-11-16 14:33:07.622 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 14:38:11.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48916 1 109 1 2025-11-16 14:38:11.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43306 1 80 1 2025-11-16 14:38:11.144 00:00:00.000 UDP 28.104.0.1:43306 -> 198.28.0.2:53 1 64 1 2025-11-16 14:38:11.144 00:00:00.000 UDP 28.104.0.1:48916 -> 198.28.0.2:53 1 64 1 2025-11-16 14:38:24.167 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 14:39:11.433 00:00:00.000 UDP 28.104.0.1:42646 -> 198.28.0.2:53 1 64 1 2025-11-16 14:39:11.433 00:00:00.000 UDP 28.104.0.1:59873 -> 198.28.0.2:53 1 64 1 2025-11-16 14:39:11.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42646 1 80 1 2025-11-16 14:39:11.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59873 1 109 1 2025-11-16 14:35:07.633 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 14:35:58.603 00:05:09.314 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 14:40:11.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40044 1 109 1 2025-11-16 14:40:11.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54631 1 80 1 2025-11-16 14:40:11.739 00:00:00.000 UDP 28.104.0.1:40044 -> 198.28.0.2:53 1 64 1 2025-11-16 14:40:11.739 00:00:00.000 UDP 28.104.0.1:54631 -> 198.28.0.2:53 1 64 1 2025-11-16 14:36:30.711 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-16 14:41:12.059 00:00:00.000 UDP 28.104.0.1:33708 -> 198.28.0.2:53 1 64 1 2025-11-16 14:41:12.060 00:00:00.000 UDP 28.104.0.1:33531 -> 198.28.0.2:53 1 64 1 2025-11-16 14:41:12.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33708 1 109 1 2025-11-16 14:41:12.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33531 1 80 1 2025-11-16 14:37:07.624 00:05:50.940 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 14:38:07.623 00:05:00.386 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 14:42:12.355 00:00:00.000 UDP 28.104.0.1:38316 -> 198.28.0.2:53 1 64 1 2025-11-16 14:42:12.355 00:00:00.000 UDP 28.104.0.1:58948 -> 198.28.0.2:53 1 64 1 2025-11-16 14:42:12.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38316 1 109 1 2025-11-16 14:42:12.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58948 1 80 1 2025-11-16 14:38:58.552 00:05:09.377 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 14:43:12.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40647 1 80 1 2025-11-16 14:43:12.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53223 1 109 1 2025-11-16 14:43:12.754 00:00:00.000 UDP 28.104.0.1:53223 -> 198.28.0.2:53 1 64 1 2025-11-16 14:43:12.754 00:00:00.000 UDP 28.104.0.1:40647 -> 198.28.0.2:53 1 64 1 2025-11-16 14:43:23.906 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 14:44:13.076 00:00:00.000 UDP 28.104.0.1:40953 -> 198.28.0.2:53 1 64 1 2025-11-16 14:44:13.076 00:00:00.000 UDP 28.104.0.1:43112 -> 198.28.0.2:53 1 64 1 2025-11-16 14:44:13.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40953 1 109 1 2025-11-16 14:44:13.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43112 1 80 1 2025-11-16 14:45:13.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58737 1 80 1 2025-11-16 14:45:13.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43401 1 109 1 2025-11-16 14:40:07.629 00:06:00.075 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 14:45:13.367 00:00:00.000 UDP 28.104.0.1:43401 -> 198.28.0.2:53 1 64 1 2025-11-16 14:45:13.367 00:00:00.000 UDP 28.104.0.1:58737 -> 198.28.0.2:53 1 64 1 2025-11-16 14:41:50.722 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-11-16 14:41:07.640 00:05:50.915 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 14:41:58.604 00:05:09.316 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 14:46:13.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38690 1 80 1 2025-11-16 14:46:13.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38030 1 109 1 2025-11-16 14:46:13.633 00:00:00.000 UDP 28.104.0.1:38690 -> 198.28.0.2:53 1 64 1 2025-11-16 14:46:13.632 00:00:00.000 UDP 28.104.0.1:38030 -> 198.28.0.2:53 1 64 1 2025-11-16 14:47:14.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37076 1 109 1 2025-11-16 14:47:14.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48605 1 80 1 2025-11-16 14:47:14.106 00:00:00.000 UDP 28.104.0.1:37076 -> 198.28.0.2:53 1 64 1 2025-11-16 14:47:14.106 00:00:00.000 UDP 28.104.0.1:48605 -> 198.28.0.2:53 1 64 1 2025-11-16 14:43:07.631 00:05:50.934 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 14:44:07.630 00:05:00.384 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 14:48:14.451 00:00:00.000 UDP 28.104.0.1:48233 -> 198.28.0.2:53 1 64 1 2025-11-16 14:48:14.451 00:00:00.000 UDP 28.104.0.1:58133 -> 198.28.0.2:53 1 64 1 2025-11-16 14:48:14.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48233 1 109 1 2025-11-16 14:48:14.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58133 1 80 1 2025-11-16 14:48:24.137 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 14:44:58.554 00:05:09.376 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 14:49:14.750 00:00:00.000 UDP 28.104.0.1:55205 -> 198.28.0.2:53 1 64 1 2025-11-16 14:49:14.750 00:00:00.000 UDP 28.104.0.1:44204 -> 198.28.0.2:53 1 64 1 2025-11-16 14:49:14.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55205 1 109 1 2025-11-16 14:49:14.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44204 1 80 1 2025-11-16 14:50:15.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40346 1 80 1 2025-11-16 14:50:15.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58275 1 109 1 2025-11-16 14:50:15.859 00:00:00.000 UDP 28.104.0.1:40346 -> 198.28.0.2:53 1 64 1 2025-11-16 14:50:15.859 00:00:00.000 UDP 28.104.0.1:58275 -> 198.28.0.2:53 1 64 1 2025-11-16 14:51:16.178 00:00:00.000 UDP 28.104.0.1:60895 -> 198.28.0.2:53 1 64 1 2025-11-16 14:51:16.178 00:00:00.000 UDP 28.104.0.1:55769 -> 198.28.0.2:53 1 64 1 2025-11-16 14:51:16.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60895 1 109 1 2025-11-16 14:51:16.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55769 1 80 1 2025-11-16 14:47:10.732 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2820 1 2025-11-16 14:47:07.641 00:05:50.916 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 14:47:58.605 00:05:09.317 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 14:47:07.631 00:06:00.076 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 14:52:16.473 00:00:00.000 UDP 28.104.0.1:33996 -> 198.28.0.2:53 1 64 1 2025-11-16 14:52:16.473 00:00:00.000 UDP 28.104.0.1:52895 -> 198.28.0.2:53 1 64 1 2025-11-16 14:52:16.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33996 1 109 1 2025-11-16 14:52:16.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52895 1 80 1 2025-11-16 14:53:16.725 00:00:00.000 UDP 28.104.0.1:48244 -> 198.28.0.2:53 1 64 1 2025-11-16 14:53:16.724 00:00:00.000 UDP 28.104.0.1:45283 -> 198.28.0.2:53 1 64 1 2025-11-16 14:53:16.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45283 1 109 1 2025-11-16 14:53:16.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48244 1 80 1 2025-11-16 14:53:24.299 00:00:00.027 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 14:49:07.631 00:05:50.936 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 14:50:07.630 00:05:00.385 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 14:54:17.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59464 1 80 1 2025-11-16 14:54:17.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45376 1 109 1 2025-11-16 14:54:17.055 00:00:00.000 UDP 28.104.0.1:59464 -> 198.28.0.2:53 1 64 1 2025-11-16 14:54:17.055 00:00:00.000 UDP 28.104.0.1:45376 -> 198.28.0.2:53 1 64 1 2025-11-16 14:50:58.555 00:05:09.378 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 14:55:17.350 00:00:00.000 UDP 28.104.0.1:39674 -> 198.28.0.2:53 1 64 1 2025-11-16 14:55:17.349 00:00:00.000 UDP 28.104.0.1:46638 -> 198.28.0.2:53 1 64 1 2025-11-16 14:55:17.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46638 1 109 1 2025-11-16 14:55:17.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39674 1 80 1 2025-11-16 14:56:17.647 00:00:00.000 UDP 28.104.0.1:60188 -> 198.28.0.2:53 1 64 1 2025-11-16 14:56:17.647 00:00:00.000 UDP 28.104.0.1:40675 -> 198.28.0.2:53 1 64 1 2025-11-16 14:56:17.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60188 1 80 1 2025-11-16 14:56:17.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40675 1 109 1 2025-11-16 14:52:30.739 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2916 1 2025-11-16 14:57:17.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47750 1 80 1 2025-11-16 14:57:17.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33439 1 109 1 2025-11-16 14:57:17.945 00:00:00.000 UDP 28.104.0.1:47750 -> 198.28.0.2:53 1 64 1 2025-11-16 14:57:17.945 00:00:00.000 UDP 28.104.0.1:33439 -> 198.28.0.2:53 1 64 1 2025-11-16 14:53:07.641 00:05:50.916 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 14:53:58.609 00:05:09.327 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 14:58:18.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43991 1 80 1 2025-11-16 14:58:18.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42137 1 109 1 2025-11-16 14:58:18.242 00:00:00.000 UDP 28.104.0.1:43991 -> 198.28.0.2:53 1 64 1 2025-11-16 14:58:18.242 00:00:00.000 UDP 28.104.0.1:42137 -> 198.28.0.2:53 1 64 1 2025-11-16 14:58:24.456 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 320, total bytes: 93866, total packets: 1383, avg bps: 195, avg pps: 0, avg bpp: 67 Time window: 2025-11-16 13:55:07 - 2025-11-16 14:59:07 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0055s User: 0.0028s Wall: 0.0040s flows/second: 80177.9 Runtime: 0.0040s