Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 09:59:45.034 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53925 1 80 1 2025-11-20 09:59:45.034 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33416 1 109 1 2025-11-20 09:59:45.024 00:00:00.000 UDP 28.104.0.1:53925 -> 198.28.0.2:53 1 64 1 2025-11-20 09:59:45.023 00:00:00.000 UDP 28.104.0.1:33416 -> 198.28.0.2:53 1 64 1 2025-11-20 09:55:09.851 00:05:50.944 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 10:00:13.948 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:00:45.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42190 1 80 1 2025-11-20 10:00:45.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54001 1 109 1 2025-11-20 10:00:45.312 00:00:00.000 UDP 28.104.0.1:42190 -> 198.28.0.2:53 1 64 1 2025-11-20 10:00:45.312 00:00:00.000 UDP 28.104.0.1:54001 -> 198.28.0.2:53 1 64 1 2025-11-20 10:01:45.564 00:00:00.000 UDP 28.104.0.1:41866 -> 198.28.0.2:53 1 64 1 2025-11-20 10:01:45.564 00:00:00.000 UDP 28.104.0.1:44530 -> 198.28.0.2:53 1 64 1 2025-11-20 10:01:45.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44530 1 80 1 2025-11-20 10:01:45.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41866 1 109 1 2025-11-20 09:58:00.791 00:05:08.605 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 09:57:09.385 00:06:00.576 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 10:02:45.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37398 1 109 1 2025-11-20 10:02:45.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53564 1 80 1 2025-11-20 10:02:45.858 00:00:00.000 UDP 28.104.0.1:53564 -> 198.28.0.2:53 1 64 1 2025-11-20 10:02:45.858 00:00:00.000 UDP 28.104.0.1:37398 -> 198.28.0.2:53 1 64 1 2025-11-20 09:58:09.842 00:05:51.004 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 10:03:46.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45083 1 109 1 2025-11-20 10:03:46.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36588 1 80 1 2025-11-20 10:03:46.170 00:00:00.000 UDP 28.104.0.1:36588 -> 198.28.0.2:53 1 64 1 2025-11-20 10:03:46.170 00:00:00.000 UDP 28.104.0.1:45083 -> 198.28.0.2:53 1 64 1 2025-11-20 10:00:00.805 00:05:08.583 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 09:59:58.288 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2360 1 2025-11-20 10:04:46.464 00:00:00.000 UDP 28.104.0.1:35108 -> 198.28.0.2:53 1 64 1 2025-11-20 10:04:46.464 00:00:00.000 UDP 28.104.0.1:60031 -> 198.28.0.2:53 1 64 1 2025-11-20 10:04:46.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35108 1 109 1 2025-11-20 10:04:46.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60031 1 80 1 2025-11-20 10:00:09.386 00:06:00.217 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 10:05:14.078 00:00:00.041 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:05:46.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48448 1 80 1 2025-11-20 10:05:46.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43110 1 109 1 2025-11-20 10:05:46.758 00:00:00.000 UDP 28.104.0.1:43110 -> 198.28.0.2:53 1 64 1 2025-11-20 10:05:46.758 00:00:00.000 UDP 28.104.0.1:48448 -> 198.28.0.2:53 1 64 1 2025-11-20 10:01:09.854 00:05:50.943 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 10:06:47.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44753 1 109 1 2025-11-20 10:06:47.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35374 1 80 1 2025-11-20 10:06:47.056 00:00:00.000 UDP 28.104.0.1:44753 -> 198.28.0.2:53 1 64 1 2025-11-20 10:06:47.056 00:00:00.000 UDP 28.104.0.1:35374 -> 198.28.0.2:53 1 64 1 2025-11-20 10:07:47.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56609 1 80 1 2025-11-20 10:07:47.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33802 1 109 1 2025-11-20 10:07:47.331 00:00:00.000 UDP 28.104.0.1:56609 -> 198.28.0.2:53 1 64 1 2025-11-20 10:07:47.331 00:00:00.000 UDP 28.104.0.1:33802 -> 198.28.0.2:53 1 64 1 2025-11-20 10:04:00.796 00:05:08.602 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 10:08:47.633 00:00:00.000 UDP 28.104.0.1:59757 -> 198.28.0.2:53 1 64 1 2025-11-20 10:08:47.633 00:00:00.000 UDP 28.104.0.1:39280 -> 198.28.0.2:53 1 64 1 2025-11-20 10:08:47.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59757 1 109 1 2025-11-20 10:08:47.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39280 1 80 1 2025-11-20 10:04:09.843 00:05:51.003 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 10:04:09.388 00:06:00.578 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 10:05:18.291 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 10:09:47.933 00:00:00.000 UDP 28.104.0.1:41017 -> 198.28.0.2:53 1 64 1 2025-11-20 10:09:47.933 00:00:00.000 UDP 28.104.0.1:40794 -> 198.28.0.2:53 1 64 1 2025-11-20 10:09:47.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40794 1 109 1 2025-11-20 10:09:47.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41017 1 80 1 2025-11-20 10:06:00.806 00:05:08.582 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 10:10:13.901 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:10:48.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36890 1 80 1 2025-11-20 10:10:48.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60039 1 109 1 2025-11-20 10:10:48.232 00:00:00.000 UDP 28.104.0.1:36890 -> 198.28.0.2:53 1 64 1 2025-11-20 10:10:48.232 00:00:00.000 UDP 28.104.0.1:60039 -> 198.28.0.2:53 1 64 1 2025-11-20 10:11:48.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52658 1 109 1 2025-11-20 10:11:48.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52849 1 80 1 2025-11-20 10:11:48.530 00:00:00.000 UDP 28.104.0.1:52849 -> 198.28.0.2:53 1 64 1 2025-11-20 10:11:48.529 00:00:00.000 UDP 28.104.0.1:52658 -> 198.28.0.2:53 1 64 1 2025-11-20 10:07:09.855 00:05:50.943 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 10:07:09.388 00:06:00.218 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 10:12:48.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41689 1 109 1 2025-11-20 10:12:48.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41215 1 80 1 2025-11-20 10:12:48.833 00:00:00.000 UDP 28.104.0.1:41215 -> 198.28.0.2:53 1 64 1 2025-11-20 10:12:48.833 00:00:00.000 UDP 28.104.0.1:41689 -> 198.28.0.2:53 1 64 1 2025-11-20 10:13:49.155 00:00:00.000 UDP 28.104.0.1:54003 -> 198.28.0.2:53 1 64 1 2025-11-20 10:13:49.155 00:00:00.000 UDP 28.104.0.1:45426 -> 198.28.0.2:53 1 64 1 2025-11-20 10:13:49.167 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45426 1 109 1 2025-11-20 10:13:49.167 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54003 1 80 1 2025-11-20 10:10:00.798 00:05:08.602 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 10:14:49.450 00:00:00.000 UDP 28.104.0.1:47443 -> 198.28.0.2:53 1 64 1 2025-11-20 10:14:49.450 00:00:00.000 UDP 28.104.0.1:34359 -> 198.28.0.2:53 1 64 1 2025-11-20 10:10:38.300 00:05:10.019 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-11-20 10:14:49.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34359 1 109 1 2025-11-20 10:14:49.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47443 1 80 1 2025-11-20 10:10:09.844 00:05:51.005 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 10:15:14.205 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:15:49.700 00:00:00.000 UDP 28.104.0.1:41698 -> 198.28.0.2:53 1 64 1 2025-11-20 10:15:49.700 00:00:00.000 UDP 28.104.0.1:38070 -> 198.28.0.2:53 1 64 1 2025-11-20 10:15:49.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38070 1 109 1 2025-11-20 10:15:49.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41698 1 80 1 2025-11-20 10:11:09.389 00:06:00.576 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 10:12:00.808 00:05:08.582 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 10:16:50.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51619 1 80 1 2025-11-20 10:16:50.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56024 1 109 1 2025-11-20 10:16:49.996 00:00:00.000 UDP 28.104.0.1:51619 -> 198.28.0.2:53 1 64 1 2025-11-20 10:16:49.996 00:00:00.000 UDP 28.104.0.1:56024 -> 198.28.0.2:53 1 64 1 2025-11-20 10:17:50.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48263 1 109 1 2025-11-20 10:17:50.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36160 1 80 1 2025-11-20 10:17:50.302 00:00:00.000 UDP 28.104.0.1:36160 -> 198.28.0.2:53 1 64 1 2025-11-20 10:17:50.302 00:00:00.000 UDP 28.104.0.1:48263 -> 198.28.0.2:53 1 64 1 2025-11-20 10:13:09.855 00:05:50.943 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 10:18:50.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44354 1 109 1 2025-11-20 10:18:50.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60005 1 80 1 2025-11-20 10:18:50.591 00:00:00.000 UDP 28.104.0.1:60005 -> 198.28.0.2:53 1 64 1 2025-11-20 10:18:50.590 00:00:00.000 UDP 28.104.0.1:44354 -> 198.28.0.2:53 1 64 1 2025-11-20 10:14:09.389 00:06:00.217 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 10:19:50.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43977 1 80 1 2025-11-20 10:19:50.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36334 1 109 1 2025-11-20 10:19:50.889 00:00:00.000 UDP 28.104.0.1:43977 -> 198.28.0.2:53 1 64 1 2025-11-20 10:19:50.889 00:00:00.000 UDP 28.104.0.1:36334 -> 198.28.0.2:53 1 64 1 2025-11-20 10:15:58.311 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 3084 1 2025-11-20 10:16:00.798 00:05:08.602 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 10:20:14.556 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:20:51.173 00:00:00.000 UDP 28.104.0.1:48633 -> 198.28.0.2:53 1 64 1 2025-11-20 10:20:51.173 00:00:00.000 UDP 28.104.0.1:59444 -> 198.28.0.2:53 1 64 1 2025-11-20 10:20:51.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59444 1 109 1 2025-11-20 10:20:51.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48633 1 80 1 2025-11-20 10:16:09.848 00:05:51.017 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 10:21:51.462 00:00:00.000 UDP 28.104.0.1:50039 -> 198.28.0.2:53 1 64 1 2025-11-20 10:21:51.462 00:00:00.000 UDP 28.104.0.1:35928 -> 198.28.0.2:53 1 64 1 2025-11-20 10:21:51.472 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35928 1 80 1 2025-11-20 10:21:51.472 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50039 1 109 1 2025-11-20 10:18:00.809 00:05:08.582 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 10:22:51.717 00:00:00.000 UDP 28.104.0.1:45131 -> 198.28.0.2:53 1 64 1 2025-11-20 10:22:51.717 00:00:00.000 UDP 28.104.0.1:35230 -> 198.28.0.2:53 1 64 1 2025-11-20 10:22:51.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35230 1 80 1 2025-11-20 10:22:51.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45131 1 109 1 2025-11-20 10:18:09.390 00:06:00.575 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 10:23:52.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54129 1 80 1 2025-11-20 10:23:52.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37712 1 109 1 2025-11-20 10:23:52.051 00:00:00.000 UDP 28.104.0.1:54129 -> 198.28.0.2:53 1 64 1 2025-11-20 10:23:52.051 00:00:00.000 UDP 28.104.0.1:37712 -> 198.28.0.2:53 1 64 1 2025-11-20 10:19:09.861 00:05:50.967 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 10:24:52.343 00:00:00.000 UDP 28.104.0.1:40266 -> 198.28.0.2:53 1 64 1 2025-11-20 10:24:52.342 00:00:00.000 UDP 28.104.0.1:49350 -> 198.28.0.2:53 1 64 1 2025-11-20 10:24:52.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49350 1 109 1 2025-11-20 10:24:52.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40266 1 80 1 2025-11-20 10:25:14.525 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:21:18.318 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2748 1 2025-11-20 10:25:52.636 00:00:00.000 UDP 28.104.0.1:51702 -> 198.28.0.2:53 1 64 1 2025-11-20 10:25:52.637 00:00:00.000 UDP 28.104.0.1:48867 -> 198.28.0.2:53 1 64 1 2025-11-20 10:25:52.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51702 1 80 1 2025-11-20 10:25:52.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48867 1 109 1 2025-11-20 10:21:09.391 00:06:00.218 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 10:22:00.814 00:05:08.586 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 10:26:52.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36212 1 109 1 2025-11-20 10:26:52.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35498 1 80 1 2025-11-20 10:26:52.923 00:00:00.000 UDP 28.104.0.1:36212 -> 198.28.0.2:53 1 64 1 2025-11-20 10:26:52.923 00:00:00.000 UDP 28.104.0.1:35498 -> 198.28.0.2:53 1 64 1 2025-11-20 10:22:09.849 00:05:51.016 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 10:27:53.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41912 1 109 1 2025-11-20 10:27:53.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42973 1 80 1 2025-11-20 10:27:53.252 00:00:00.000 UDP 28.104.0.1:41912 -> 198.28.0.2:53 1 64 1 2025-11-20 10:27:53.252 00:00:00.000 UDP 28.104.0.1:42973 -> 198.28.0.2:53 1 64 1 2025-11-20 10:24:00.824 00:05:08.566 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 10:28:54.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35273 1 109 1 2025-11-20 10:28:54.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44127 1 80 1 2025-11-20 10:28:54.228 00:00:00.000 UDP 28.104.0.1:35273 -> 198.28.0.2:53 1 64 1 2025-11-20 10:28:54.229 00:00:00.000 UDP 28.104.0.1:44127 -> 198.28.0.2:53 1 64 1 2025-11-20 10:29:54.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47584 1 109 1 2025-11-20 10:29:54.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38643 1 80 1 2025-11-20 10:29:54.528 00:00:00.000 UDP 28.104.0.1:47584 -> 198.28.0.2:53 1 64 1 2025-11-20 10:29:54.528 00:00:00.000 UDP 28.104.0.1:38643 -> 198.28.0.2:53 1 64 1 2025-11-20 10:25:09.867 00:05:50.949 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 10:25:09.391 00:06:00.579 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 10:30:14.602 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:26:38.330 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-11-20 10:30:55.215 00:00:00.000 UDP 28.104.0.1:48737 -> 198.28.0.2:53 1 64 1 2025-11-20 10:30:55.215 00:00:00.000 UDP 28.104.0.1:51261 -> 198.28.0.2:53 1 64 1 2025-11-20 10:30:55.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51261 1 80 1 2025-11-20 10:30:55.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48737 1 109 1 2025-11-20 10:31:55.470 00:00:00.000 UDP 28.104.0.1:52457 -> 198.28.0.2:53 1 64 1 2025-11-20 10:31:55.470 00:00:00.000 UDP 28.104.0.1:40057 -> 198.28.0.2:53 1 64 1 2025-11-20 10:31:55.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40057 1 109 1 2025-11-20 10:31:55.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52457 1 80 1 2025-11-20 10:28:00.815 00:05:08.587 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 10:32:55.832 00:00:00.000 UDP 28.104.0.1:37291 -> 198.28.0.2:53 1 64 1 2025-11-20 10:32:55.832 00:00:00.000 UDP 28.104.0.1:52297 -> 198.28.0.2:53 1 64 1 2025-11-20 10:32:55.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52297 1 80 1 2025-11-20 10:32:55.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37291 1 109 1 2025-11-20 10:28:09.856 00:05:51.012 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 10:28:09.390 00:06:00.219 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 10:33:56.122 00:00:00.000 UDP 28.104.0.1:46001 -> 198.28.0.2:53 1 64 1 2025-11-20 10:33:56.122 00:00:00.000 UDP 28.104.0.1:57223 -> 198.28.0.2:53 1 64 1 2025-11-20 10:33:56.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57223 1 80 1 2025-11-20 10:33:56.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46001 1 109 1 2025-11-20 10:30:00.825 00:05:08.566 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 10:34:56.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39985 1 80 1 2025-11-20 10:34:56.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58862 1 109 1 2025-11-20 10:34:56.443 00:00:00.000 UDP 28.104.0.1:58862 -> 198.28.0.2:53 1 64 1 2025-11-20 10:34:56.444 00:00:00.000 UDP 28.104.0.1:39985 -> 198.28.0.2:53 1 64 1 2025-11-20 10:35:14.717 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:35:56.743 00:00:00.000 UDP 28.104.0.1:57673 -> 198.28.0.2:53 1 64 1 2025-11-20 10:35:56.742 00:00:00.000 UDP 28.104.0.1:59366 -> 198.28.0.2:53 1 64 1 2025-11-20 10:35:56.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57673 1 80 1 2025-11-20 10:35:56.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59366 1 109 1 2025-11-20 10:31:09.866 00:05:50.959 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 10:31:58.343 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-20 10:36:57.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44654 1 109 1 2025-11-20 10:36:57.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50784 1 80 1 2025-11-20 10:36:57.058 00:00:00.000 UDP 28.104.0.1:50784 -> 198.28.0.2:53 1 64 1 2025-11-20 10:36:57.058 00:00:00.000 UDP 28.104.0.1:44654 -> 198.28.0.2:53 1 64 1 2025-11-20 10:32:09.391 00:06:00.578 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 10:37:57.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57993 1 80 1 2025-11-20 10:37:57.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39408 1 109 1 2025-11-20 10:37:57.349 00:00:00.000 UDP 28.104.0.1:39408 -> 198.28.0.2:53 1 64 1 2025-11-20 10:37:57.349 00:00:00.000 UDP 28.104.0.1:57993 -> 198.28.0.2:53 1 64 1 2025-11-20 10:34:00.817 00:05:08.586 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 10:38:57.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58290 1 109 1 2025-11-20 10:38:57.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37187 1 80 1 2025-11-20 10:38:57.642 00:00:00.000 UDP 28.104.0.1:58290 -> 198.28.0.2:53 1 64 1 2025-11-20 10:38:57.642 00:00:00.000 UDP 28.104.0.1:37187 -> 198.28.0.2:53 1 64 1 2025-11-20 10:34:09.856 00:05:51.015 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 10:39:57.895 00:00:00.000 UDP 28.104.0.1:33887 -> 198.28.0.2:53 1 64 1 2025-11-20 10:39:57.895 00:00:00.000 UDP 28.104.0.1:37682 -> 198.28.0.2:53 1 64 1 2025-11-20 10:39:57.906 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33887 1 80 1 2025-11-20 10:39:57.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37682 1 109 1 2025-11-20 10:36:00.833 00:05:08.560 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 10:35:09.392 00:06:00.221 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 10:40:14.895 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:41:11.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35457 1 80 1 2025-11-20 10:41:11.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48804 1 109 1 2025-11-20 10:41:11.087 00:00:00.000 UDP 28.104.0.1:48804 -> 198.28.0.2:53 1 64 1 2025-11-20 10:41:11.087 00:00:00.000 UDP 28.104.0.1:35457 -> 198.28.0.2:53 1 64 1 2025-11-20 10:37:18.346 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 10:37:09.867 00:05:50.956 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 10:42:11.383 00:00:00.000 UDP 28.104.0.1:34455 -> 198.28.0.2:53 1 64 1 2025-11-20 10:42:11.383 00:00:00.000 UDP 28.104.0.1:55072 -> 198.28.0.2:53 1 64 1 2025-11-20 10:42:11.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34455 1 80 1 2025-11-20 10:42:11.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55072 1 109 1 2025-11-20 10:43:11.685 00:00:00.000 UDP 28.104.0.1:51965 -> 198.28.0.2:53 1 64 1 2025-11-20 10:43:11.685 00:00:00.000 UDP 28.104.0.1:44293 -> 198.28.0.2:53 1 64 1 2025-11-20 10:43:11.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44293 1 109 1 2025-11-20 10:43:11.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51965 1 80 1 2025-11-20 10:39:09.392 00:06:00.580 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 10:44:11.977 00:00:00.000 UDP 28.104.0.1:60317 -> 198.28.0.2:53 1 64 1 2025-11-20 10:44:11.977 00:00:00.000 UDP 28.104.0.1:42111 -> 198.28.0.2:53 1 64 1 2025-11-20 10:44:11.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42111 1 109 1 2025-11-20 10:40:00.822 00:05:08.581 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 10:44:11.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60317 1 80 1 2025-11-20 10:40:09.858 00:05:51.015 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 10:45:12.274 00:00:00.000 UDP 28.104.0.1:38883 -> 198.28.0.2:53 1 64 1 2025-11-20 10:45:12.274 00:00:00.000 UDP 28.104.0.1:39943 -> 198.28.0.2:53 1 64 1 2025-11-20 10:45:12.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38883 1 80 1 2025-11-20 10:45:12.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39943 1 109 1 2025-11-20 10:45:14.903 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:46:12.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41677 1 80 1 2025-11-20 10:46:12.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47069 1 109 1 2025-11-20 10:42:00.831 00:05:08.563 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 10:46:12.570 00:00:00.000 UDP 28.104.0.1:47069 -> 198.28.0.2:53 1 64 1 2025-11-20 10:46:12.570 00:00:00.000 UDP 28.104.0.1:41677 -> 198.28.0.2:53 1 64 1 2025-11-20 10:42:38.355 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2892 1 2025-11-20 10:47:12.869 00:00:00.000 UDP 28.104.0.1:34178 -> 198.28.0.2:53 1 64 1 2025-11-20 10:42:09.393 00:06:00.221 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 10:47:12.869 00:00:00.000 UDP 28.104.0.1:44841 -> 198.28.0.2:53 1 64 1 2025-11-20 10:47:12.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34178 1 80 1 2025-11-20 10:47:12.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44841 1 109 1 2025-11-20 10:43:09.869 00:05:50.955 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 10:48:13.182 00:00:00.000 UDP 28.104.0.1:48039 -> 198.28.0.2:53 1 64 1 2025-11-20 10:48:13.182 00:00:00.000 UDP 28.104.0.1:41707 -> 198.28.0.2:53 1 64 1 2025-11-20 10:48:13.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41707 1 109 1 2025-11-20 10:48:13.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48039 1 80 1 2025-11-20 10:49:13.492 00:00:00.000 UDP 28.104.0.1:47443 -> 198.28.0.2:53 1 64 1 2025-11-20 10:49:13.492 00:00:00.000 UDP 28.104.0.1:50567 -> 198.28.0.2:53 1 64 1 2025-11-20 10:49:13.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50567 1 109 1 2025-11-20 10:49:13.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47443 1 80 1 2025-11-20 10:50:13.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41358 1 80 1 2025-11-20 10:46:00.823 00:05:08.582 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 10:50:13.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37046 1 109 1 2025-11-20 10:50:13.790 00:00:00.000 UDP 28.104.0.1:41358 -> 198.28.0.2:53 1 64 1 2025-11-20 10:50:13.790 00:00:00.000 UDP 28.104.0.1:37046 -> 198.28.0.2:53 1 64 1 2025-11-20 10:50:14.984 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:46:09.858 00:05:51.023 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 10:46:09.393 00:06:00.581 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 10:51:14.105 00:00:00.000 UDP 28.104.0.1:53848 -> 198.28.0.2:53 1 64 1 2025-11-20 10:51:14.105 00:00:00.000 UDP 28.104.0.1:50251 -> 198.28.0.2:53 1 64 1 2025-11-20 10:51:14.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50251 1 80 1 2025-11-20 10:51:14.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53848 1 109 1 2025-11-20 10:47:58.357 00:05:10.019 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2972 1 2025-11-20 10:48:00.832 00:05:08.562 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 10:52:14.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36073 1 109 1 2025-11-20 10:52:14.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56308 1 80 1 2025-11-20 10:52:14.352 00:00:00.000 UDP 28.104.0.1:56308 -> 198.28.0.2:53 1 64 1 2025-11-20 10:52:14.352 00:00:00.000 UDP 28.104.0.1:36073 -> 198.28.0.2:53 1 64 1 2025-11-20 10:53:14.652 00:00:00.000 UDP 28.104.0.1:55568 -> 198.28.0.2:53 1 64 1 2025-11-20 10:53:14.652 00:00:00.000 UDP 28.104.0.1:35334 -> 198.28.0.2:53 1 64 1 2025-11-20 10:53:14.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35334 1 109 1 2025-11-20 10:53:14.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55568 1 80 1 2025-11-20 10:49:09.871 00:05:50.960 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 10:54:14.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37409 1 80 1 2025-11-20 10:54:14.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46322 1 109 1 2025-11-20 10:49:09.396 00:06:00.220 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 10:54:14.956 00:00:00.000 UDP 28.104.0.1:37409 -> 198.28.0.2:53 1 64 1 2025-11-20 10:54:14.956 00:00:00.000 UDP 28.104.0.1:46322 -> 198.28.0.2:53 1 64 1 2025-11-20 10:55:15.257 00:00:00.000 UDP 28.104.0.1:54937 -> 198.28.0.2:53 1 64 1 2025-11-20 10:55:15.257 00:00:00.000 UDP 28.104.0.1:44689 -> 198.28.0.2:53 1 64 1 2025-11-20 10:55:14.873 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 10:55:15.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54937 1 80 1 2025-11-20 10:55:15.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44689 1 109 1 2025-11-20 10:52:00.831 00:05:08.574 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 10:56:15.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59522 1 109 1 2025-11-20 10:56:15.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36490 1 80 1 2025-11-20 10:56:15.558 00:00:00.000 UDP 28.104.0.1:59522 -> 198.28.0.2:53 1 64 1 2025-11-20 10:56:15.558 00:00:00.000 UDP 28.104.0.1:36490 -> 198.28.0.2:53 1 64 1 2025-11-20 10:52:09.863 00:05:51.024 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 10:57:15.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52383 1 80 1 2025-11-20 10:57:15.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39814 1 109 1 2025-11-20 10:57:15.872 00:00:00.000 UDP 28.104.0.1:52383 -> 198.28.0.2:53 1 64 1 2025-11-20 10:57:15.872 00:00:00.000 UDP 28.104.0.1:39814 -> 198.28.0.2:53 1 64 1 2025-11-20 10:53:18.372 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-20 10:53:09.395 00:06:00.594 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 10:54:00.842 00:05:08.553 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 10:58:16.187 00:00:00.000 UDP 28.104.0.1:39615 -> 198.28.0.2:53 1 64 1 2025-11-20 10:58:16.187 00:00:00.000 UDP 28.104.0.1:32893 -> 198.28.0.2:53 1 64 1 2025-11-20 10:58:16.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32893 1 109 1 2025-11-20 10:58:16.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39615 1 80 1 Summary: total flows: 316, total bytes: 94268, total packets: 1388, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-11-20 09:55:09 - 2025-11-20 10:59:09 Total flows processed: 316, passed: 316, Blocks skipped: 0, Bytes read: 32928 Sys: 0.0038s User: 0.0029s Wall: 0.0038s flows/second: 83663.7 Runtime: 0.0038s