Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 10:59:16.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49728 1 80 1 2025-11-20 10:59:16.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39309 1 109 1 2025-11-20 10:59:16.535 00:00:00.000 UDP 28.104.0.1:39309 -> 198.28.0.2:53 1 64 1 2025-11-20 10:59:16.535 00:00:00.000 UDP 28.104.0.1:49728 -> 198.28.0.2:53 1 64 1 2025-11-20 10:55:09.872 00:05:50.965 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 11:00:15.163 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:00:16.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40635 1 80 1 2025-11-20 11:00:16.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39310 1 109 1 2025-11-20 11:00:16.838 00:00:00.000 UDP 28.104.0.1:40635 -> 198.28.0.2:53 1 64 1 2025-11-20 11:00:16.838 00:00:00.000 UDP 28.104.0.1:39310 -> 198.28.0.2:53 1 64 1 2025-11-20 10:56:09.395 00:06:00.223 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 11:01:17.194 00:00:00.000 UDP 28.104.0.1:53998 -> 198.28.0.2:53 1 64 1 2025-11-20 11:01:17.194 00:00:00.000 UDP 28.104.0.1:43694 -> 198.28.0.2:53 1 64 1 2025-11-20 11:01:17.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53998 1 109 1 2025-11-20 11:01:17.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43694 1 80 1 2025-11-20 11:02:17.493 00:00:00.000 UDP 28.104.0.1:42148 -> 198.28.0.2:53 1 64 1 2025-11-20 11:02:17.493 00:00:00.000 UDP 28.104.0.1:47331 -> 198.28.0.2:53 1 64 1 2025-11-20 10:58:00.836 00:05:08.570 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 11:02:17.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42148 1 80 1 2025-11-20 11:02:17.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47331 1 109 1 2025-11-20 10:58:38.378 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-20 10:58:09.863 00:05:51.025 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 11:03:18.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39311 1 109 1 2025-11-20 11:03:18.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47580 1 80 1 2025-11-20 11:03:18.395 00:00:00.000 UDP 28.104.0.1:39311 -> 198.28.0.2:53 1 64 1 2025-11-20 11:03:18.395 00:00:00.000 UDP 28.104.0.1:47580 -> 198.28.0.2:53 1 64 1 2025-11-20 11:00:00.846 00:05:08.550 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 11:04:18.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43930 1 80 1 2025-11-20 11:04:18.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48067 1 109 1 2025-11-20 11:04:18.696 00:00:00.000 UDP 28.104.0.1:48067 -> 198.28.0.2:53 1 64 1 2025-11-20 11:04:18.696 00:00:00.000 UDP 28.104.0.1:43930 -> 198.28.0.2:53 1 64 1 2025-11-20 11:00:09.395 00:06:00.597 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 11:05:15.304 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:05:19.022 00:00:00.000 UDP 28.104.0.1:54278 -> 198.28.0.2:53 1 64 1 2025-11-20 11:05:19.022 00:00:00.000 UDP 28.104.0.1:35074 -> 198.28.0.2:53 1 64 1 2025-11-20 11:05:19.034 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54278 1 80 1 2025-11-20 11:05:19.034 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35074 1 109 1 2025-11-20 11:01:09.875 00:05:50.964 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 11:06:19.325 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50118 1 109 1 2025-11-20 11:06:19.325 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35726 1 80 1 2025-11-20 11:06:19.315 00:00:00.000 UDP 28.104.0.1:35726 -> 198.28.0.2:53 1 64 1 2025-11-20 11:06:19.315 00:00:00.000 UDP 28.104.0.1:50118 -> 198.28.0.2:53 1 64 1 2025-11-20 11:07:19.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55623 1 109 1 2025-11-20 11:07:19.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43807 1 80 1 2025-11-20 11:07:19.569 00:00:00.000 UDP 28.104.0.1:43807 -> 198.28.0.2:53 1 64 1 2025-11-20 11:07:19.568 00:00:00.000 UDP 28.104.0.1:55623 -> 198.28.0.2:53 1 64 1 2025-11-20 11:03:09.397 00:06:00.223 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 11:03:58.384 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-20 11:04:00.837 00:05:08.572 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 11:08:19.869 00:00:00.000 UDP 28.104.0.1:50308 -> 198.28.0.2:53 1 64 1 2025-11-20 11:08:19.869 00:00:00.000 UDP 28.104.0.1:51265 -> 198.28.0.2:53 1 64 1 2025-11-20 11:08:19.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50308 1 80 1 2025-11-20 11:08:19.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51265 1 109 1 2025-11-20 11:04:09.864 00:05:51.025 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 11:09:20.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56346 1 109 1 2025-11-20 11:09:20.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56033 1 80 1 2025-11-20 11:09:20.174 00:00:00.000 UDP 28.104.0.1:56346 -> 198.28.0.2:53 1 64 1 2025-11-20 11:09:20.174 00:00:00.000 UDP 28.104.0.1:56033 -> 198.28.0.2:53 1 64 1 2025-11-20 11:06:00.848 00:05:08.552 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 11:10:15.216 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:10:20.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47842 1 109 1 2025-11-20 11:10:20.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54108 1 80 1 2025-11-20 11:10:20.423 00:00:00.000 UDP 28.104.0.1:54108 -> 198.28.0.2:53 1 64 1 2025-11-20 11:10:20.423 00:00:00.000 UDP 28.104.0.1:47842 -> 198.28.0.2:53 1 64 1 2025-11-20 11:11:20.720 00:00:00.000 UDP 28.104.0.1:58495 -> 198.28.0.2:53 1 64 1 2025-11-20 11:11:20.720 00:00:00.000 UDP 28.104.0.1:33086 -> 198.28.0.2:53 1 64 1 2025-11-20 11:11:20.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58495 1 109 1 2025-11-20 11:11:20.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33086 1 80 1 2025-11-20 11:07:09.875 00:05:50.965 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 11:07:09.397 00:06:00.596 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 11:12:21.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55506 1 109 1 2025-11-20 11:12:21.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54043 1 80 1 2025-11-20 11:12:21.043 00:00:00.000 UDP 28.104.0.1:55506 -> 198.28.0.2:53 1 64 1 2025-11-20 11:12:21.042 00:00:00.000 UDP 28.104.0.1:54043 -> 198.28.0.2:53 1 64 1 2025-11-20 11:13:21.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39651 1 109 1 2025-11-20 11:13:21.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53383 1 80 1 2025-11-20 11:13:21.337 00:00:00.000 UDP 28.104.0.1:53383 -> 198.28.0.2:53 1 64 1 2025-11-20 11:13:21.337 00:00:00.000 UDP 28.104.0.1:39651 -> 198.28.0.2:53 1 64 1 2025-11-20 11:09:18.386 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-11-20 11:10:00.838 00:05:08.572 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 11:14:21.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58666 1 80 1 2025-11-20 11:14:21.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47502 1 109 1 2025-11-20 11:14:21.905 00:00:00.000 UDP 28.104.0.1:47502 -> 198.28.0.2:53 1 64 1 2025-11-20 11:14:21.905 00:00:00.000 UDP 28.104.0.1:58666 -> 198.28.0.2:53 1 64 1 2025-11-20 11:10:09.865 00:05:51.026 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 11:10:09.401 00:06:00.220 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 11:15:17.334 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:15:22.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58588 1 80 1 2025-11-20 11:15:22.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58176 1 109 1 2025-11-20 11:15:22.166 00:00:00.000 UDP 28.104.0.1:58176 -> 198.28.0.2:53 1 64 1 2025-11-20 11:15:22.166 00:00:00.000 UDP 28.104.0.1:58588 -> 198.28.0.2:53 1 64 1 2025-11-20 11:12:00.849 00:05:08.552 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 11:16:23.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40082 1 109 1 2025-11-20 11:16:23.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39845 1 80 1 2025-11-20 11:16:23.095 00:00:00.000 UDP 28.104.0.1:40082 -> 198.28.0.2:53 1 64 1 2025-11-20 11:16:23.095 00:00:00.000 UDP 28.104.0.1:39845 -> 198.28.0.2:53 1 64 1 2025-11-20 11:17:23.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40053 1 109 1 2025-11-20 11:17:23.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39627 1 80 1 2025-11-20 11:17:23.392 00:00:00.000 UDP 28.104.0.1:39627 -> 198.28.0.2:53 1 64 1 2025-11-20 11:17:23.391 00:00:00.000 UDP 28.104.0.1:40053 -> 198.28.0.2:53 1 64 1 2025-11-20 11:13:09.876 00:05:50.966 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 11:18:23.712 00:00:00.000 UDP 28.104.0.1:53823 -> 198.28.0.2:53 1 64 1 2025-11-20 11:18:23.712 00:00:00.000 UDP 28.104.0.1:51015 -> 198.28.0.2:53 1 64 1 2025-11-20 11:18:23.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51015 1 80 1 2025-11-20 11:18:23.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53823 1 109 1 2025-11-20 11:14:33.345 00:05:05.051 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 3080 1 2025-11-20 11:14:09.401 00:06:00.596 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 11:19:24.004 00:00:00.000 UDP 28.104.0.1:56639 -> 198.28.0.2:53 1 64 1 2025-11-20 11:19:24.003 00:00:00.000 UDP 28.104.0.1:38380 -> 198.28.0.2:53 1 64 1 2025-11-20 11:19:24.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56639 1 109 1 2025-11-20 11:19:24.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38380 1 80 1 2025-11-20 11:16:00.842 00:05:08.573 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 11:20:17.405 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:20:24.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60557 1 109 1 2025-11-20 11:20:24.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44997 1 80 1 2025-11-20 11:20:24.302 00:00:00.000 UDP 28.104.0.1:44997 -> 198.28.0.2:53 1 64 1 2025-11-20 11:20:24.302 00:00:00.000 UDP 28.104.0.1:60557 -> 198.28.0.2:53 1 64 1 2025-11-20 11:16:09.867 00:05:51.025 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 11:21:24.551 00:00:00.000 UDP 28.104.0.1:56185 -> 198.28.0.2:53 1 64 1 2025-11-20 11:21:24.551 00:00:00.000 UDP 28.104.0.1:54369 -> 198.28.0.2:53 1 64 1 2025-11-20 11:21:24.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54369 1 109 1 2025-11-20 11:21:24.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56185 1 80 1 2025-11-20 11:17:09.403 00:06:00.223 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 11:18:00.853 00:05:08.554 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 11:22:24.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38842 1 80 1 2025-11-20 11:22:24.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60719 1 109 1 2025-11-20 11:22:24.859 00:00:00.000 UDP 28.104.0.1:38842 -> 198.28.0.2:53 1 64 1 2025-11-20 11:22:24.858 00:00:00.000 UDP 28.104.0.1:60719 -> 198.28.0.2:53 1 64 1 2025-11-20 11:23:25.178 00:00:00.000 UDP 28.104.0.1:44367 -> 198.28.0.2:53 1 64 1 2025-11-20 11:23:25.178 00:00:00.000 UDP 28.104.0.1:45774 -> 198.28.0.2:53 1 64 1 2025-11-20 11:23:25.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45774 1 109 1 2025-11-20 11:23:25.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44367 1 80 1 2025-11-20 11:19:09.880 00:05:50.962 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 11:19:48.397 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2708 1 2025-11-20 11:24:25.433 00:00:00.000 UDP 28.104.0.1:38087 -> 198.28.0.2:53 1 64 1 2025-11-20 11:24:25.433 00:00:00.000 UDP 28.104.0.1:43467 -> 198.28.0.2:53 1 64 1 2025-11-20 11:24:25.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38087 1 109 1 2025-11-20 11:24:25.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43467 1 80 1 2025-11-20 11:25:17.426 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:25:25.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41527 1 80 1 2025-11-20 11:25:25.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58348 1 109 1 2025-11-20 11:25:25.726 00:00:00.000 UDP 28.104.0.1:58348 -> 198.28.0.2:53 1 64 1 2025-11-20 11:25:25.725 00:00:00.000 UDP 28.104.0.1:41527 -> 198.28.0.2:53 1 64 1 2025-11-20 11:22:00.841 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 11:21:09.404 00:06:00.595 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 11:26:26.046 00:00:00.000 UDP 28.104.0.1:59857 -> 198.28.0.2:53 1 64 1 2025-11-20 11:26:26.046 00:00:00.000 UDP 28.104.0.1:54111 -> 198.28.0.2:53 1 64 1 2025-11-20 11:26:26.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54111 1 80 1 2025-11-20 11:26:26.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59857 1 109 1 2025-11-20 11:22:09.871 00:05:51.022 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 11:27:26.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48433 1 109 1 2025-11-20 11:27:26.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46851 1 80 1 2025-11-20 11:27:26.486 00:00:00.000 UDP 28.104.0.1:48433 -> 198.28.0.2:53 1 64 1 2025-11-20 11:27:26.486 00:00:00.000 UDP 28.104.0.1:46851 -> 198.28.0.2:53 1 64 1 2025-11-20 11:24:00.852 00:05:08.554 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 11:28:26.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55246 1 109 1 2025-11-20 11:28:26.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34796 1 80 1 2025-11-20 11:28:26.780 00:00:00.000 UDP 28.104.0.1:55246 -> 198.28.0.2:53 1 64 1 2025-11-20 11:28:26.780 00:00:00.000 UDP 28.104.0.1:34796 -> 198.28.0.2:53 1 64 1 2025-11-20 11:24:09.407 00:06:00.221 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 11:25:08.411 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2360 1 2025-11-20 11:29:27.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45068 1 109 1 2025-11-20 11:29:27.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50249 1 80 1 2025-11-20 11:29:27.093 00:00:00.000 UDP 28.104.0.1:45068 -> 198.28.0.2:53 1 64 1 2025-11-20 11:29:27.093 00:00:00.000 UDP 28.104.0.1:50249 -> 198.28.0.2:53 1 64 1 2025-11-20 11:25:09.881 00:05:50.962 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 11:30:17.325 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:30:27.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50323 1 109 1 2025-11-20 11:30:27.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47845 1 80 1 2025-11-20 11:30:27.351 00:00:00.000 UDP 28.104.0.1:47845 -> 198.28.0.2:53 1 64 1 2025-11-20 11:30:27.351 00:00:00.000 UDP 28.104.0.1:50323 -> 198.28.0.2:53 1 64 1 2025-11-20 11:31:27.641 00:00:00.000 UDP 28.104.0.1:59937 -> 198.28.0.2:53 1 64 1 2025-11-20 11:31:27.642 00:00:00.000 UDP 28.104.0.1:42093 -> 198.28.0.2:53 1 64 1 2025-11-20 11:31:27.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59937 1 109 1 2025-11-20 11:31:27.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42093 1 80 1 2025-11-20 11:28:09.406 00:05:00.594 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 11:28:00.843 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 11:32:27.934 00:00:00.000 UDP 28.104.0.1:55607 -> 198.28.0.2:53 1 64 1 2025-11-20 11:32:27.934 00:00:00.000 UDP 28.104.0.1:54005 -> 198.28.0.2:53 1 64 1 2025-11-20 11:32:27.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55607 1 80 1 2025-11-20 11:32:27.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54005 1 109 1 2025-11-20 11:28:09.872 00:05:51.023 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 11:33:28.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37036 1 80 1 2025-11-20 11:33:28.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44290 1 109 1 2025-11-20 11:33:28.244 00:00:00.000 UDP 28.104.0.1:37036 -> 198.28.0.2:53 1 64 1 2025-11-20 11:33:28.244 00:00:00.000 UDP 28.104.0.1:44290 -> 198.28.0.2:53 1 64 1 2025-11-20 11:30:00.853 00:05:08.557 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 11:34:28.545 00:00:00.000 UDP 28.104.0.1:40685 -> 198.28.0.2:53 1 64 1 2025-11-20 11:34:28.546 00:00:00.000 UDP 28.104.0.1:52760 -> 198.28.0.2:53 1 64 1 2025-11-20 11:34:28.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52760 1 109 1 2025-11-20 11:34:28.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40685 1 80 1 2025-11-20 11:30:28.420 00:05:10.015 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 11:35:17.486 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:35:28.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38807 1 109 1 2025-11-20 11:35:28.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45076 1 80 1 2025-11-20 11:35:28.836 00:00:00.000 UDP 28.104.0.1:45076 -> 198.28.0.2:53 1 64 1 2025-11-20 11:35:28.836 00:00:00.000 UDP 28.104.0.1:38807 -> 198.28.0.2:53 1 64 1 2025-11-20 11:31:09.882 00:05:50.963 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 11:31:09.408 00:06:00.221 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 11:36:29.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44330 1 80 1 2025-11-20 11:36:29.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35965 1 109 1 2025-11-20 11:36:29.162 00:00:00.000 UDP 28.104.0.1:35965 -> 198.28.0.2:53 1 64 1 2025-11-20 11:36:29.163 00:00:00.000 UDP 28.104.0.1:44330 -> 198.28.0.2:53 1 64 1 2025-11-20 11:37:29.583 00:00:00.000 UDP 28.104.0.1:37533 -> 198.28.0.2:53 1 64 1 2025-11-20 11:37:29.583 00:00:00.000 UDP 28.104.0.1:51721 -> 198.28.0.2:53 1 64 1 2025-11-20 11:37:29.594 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51721 1 109 1 2025-11-20 11:37:29.594 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37533 1 80 1 2025-11-20 11:34:00.845 00:05:08.576 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 11:34:09.407 00:05:00.594 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 11:38:29.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45176 1 80 1 2025-11-20 11:38:29.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33487 1 109 1 2025-11-20 11:38:29.843 00:00:00.000 UDP 28.104.0.1:33487 -> 198.28.0.2:53 1 64 1 2025-11-20 11:38:29.843 00:00:00.000 UDP 28.104.0.1:45176 -> 198.28.0.2:53 1 64 1 2025-11-20 11:34:09.873 00:05:51.022 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 11:39:30.153 00:00:00.000 UDP 28.104.0.1:50401 -> 198.28.0.2:53 1 64 1 2025-11-20 11:39:30.153 00:00:00.000 UDP 28.104.0.1:39268 -> 198.28.0.2:53 1 64 1 2025-11-20 11:39:30.164 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50401 1 80 1 2025-11-20 11:39:30.163 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39268 1 109 1 2025-11-20 11:35:48.435 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-20 11:36:00.855 00:05:08.556 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 11:40:17.672 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:40:30.456 00:00:00.000 UDP 28.104.0.1:49322 -> 198.28.0.2:53 1 64 1 2025-11-20 11:40:30.456 00:00:00.000 UDP 28.104.0.1:45953 -> 198.28.0.2:53 1 64 1 2025-11-20 11:40:30.466 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45953 1 80 1 2025-11-20 11:40:30.466 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49322 1 109 1 2025-11-20 11:41:30.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52793 1 80 1 2025-11-20 11:41:30.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32876 1 109 1 2025-11-20 11:41:30.756 00:00:00.000 UDP 28.104.0.1:32876 -> 198.28.0.2:53 1 64 1 2025-11-20 11:41:30.756 00:00:00.000 UDP 28.104.0.1:52793 -> 198.28.0.2:53 1 64 1 2025-11-20 11:37:09.883 00:05:50.963 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 11:42:31.077 00:00:00.000 UDP 28.104.0.1:47212 -> 198.28.0.2:53 1 64 1 2025-11-20 11:42:31.077 00:00:00.000 UDP 28.104.0.1:44981 -> 198.28.0.2:53 1 64 1 2025-11-20 11:42:31.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47212 1 80 1 2025-11-20 11:42:31.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44981 1 109 1 2025-11-20 11:38:09.410 00:06:00.220 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 11:43:31.375 00:00:00.000 UDP 28.104.0.1:38231 -> 198.28.0.2:53 1 64 1 2025-11-20 11:43:31.375 00:00:00.000 UDP 28.104.0.1:33523 -> 198.28.0.2:53 1 64 1 2025-11-20 11:43:31.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33523 1 109 1 2025-11-20 11:43:31.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38231 1 80 1 2025-11-20 11:40:09.411 00:05:00.590 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 11:40:00.845 00:05:08.581 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 11:44:31.670 00:00:00.000 UDP 28.104.0.1:56895 -> 198.28.0.2:53 1 64 1 2025-11-20 11:44:31.671 00:00:00.000 UDP 28.104.0.1:36922 -> 198.28.0.2:53 1 64 1 2025-11-20 11:44:31.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36922 1 80 1 2025-11-20 11:44:31.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56895 1 109 1 2025-11-20 11:40:09.874 00:05:51.030 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 11:45:17.811 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:41:08.446 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 41 3164 1 2025-11-20 11:45:31.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52459 1 109 1 2025-11-20 11:45:31.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60073 1 80 1 2025-11-20 11:45:31.984 00:00:00.000 UDP 28.104.0.1:52459 -> 198.28.0.2:53 1 64 1 2025-11-20 11:45:31.984 00:00:00.000 UDP 28.104.0.1:60073 -> 198.28.0.2:53 1 64 1 2025-11-20 11:42:00.856 00:05:08.562 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 11:46:32.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41140 1 109 1 2025-11-20 11:46:32.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35408 1 80 1 2025-11-20 11:46:32.281 00:00:00.000 UDP 28.104.0.1:35408 -> 198.28.0.2:53 1 64 1 2025-11-20 11:46:32.281 00:00:00.000 UDP 28.104.0.1:41140 -> 198.28.0.2:53 1 64 1 2025-11-20 11:47:32.570 00:00:00.000 UDP 28.104.0.1:41668 -> 198.28.0.2:53 1 64 1 2025-11-20 11:47:32.569 00:00:00.000 UDP 28.104.0.1:39550 -> 198.28.0.2:53 1 64 1 2025-11-20 11:47:32.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41668 1 109 1 2025-11-20 11:47:32.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39550 1 80 1 2025-11-20 11:43:09.886 00:05:50.971 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 11:48:32.821 00:00:00.000 UDP 28.104.0.1:46819 -> 198.28.0.2:53 1 64 1 2025-11-20 11:48:32.822 00:00:00.000 UDP 28.104.0.1:56320 -> 198.28.0.2:53 1 64 1 2025-11-20 11:48:32.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46819 1 109 1 2025-11-20 11:48:32.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56320 1 80 1 2025-11-20 11:49:33.130 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58895 1 80 1 2025-11-20 11:49:33.130 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41680 1 109 1 2025-11-20 11:49:33.121 00:00:00.000 UDP 28.104.0.1:58895 -> 198.28.0.2:53 1 64 1 2025-11-20 11:49:33.121 00:00:00.000 UDP 28.104.0.1:41680 -> 198.28.0.2:53 1 64 1 2025-11-20 11:46:00.854 00:05:08.574 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 11:46:09.418 00:05:00.588 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 11:45:09.418 00:06:00.220 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 11:50:18.223 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:50:33.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41446 1 80 1 2025-11-20 11:50:33.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57057 1 109 1 2025-11-20 11:50:33.415 00:00:00.000 UDP 28.104.0.1:41446 -> 198.28.0.2:53 1 64 1 2025-11-20 11:50:33.416 00:00:00.000 UDP 28.104.0.1:57057 -> 198.28.0.2:53 1 64 1 2025-11-20 11:46:28.456 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2612 1 2025-11-20 11:46:09.876 00:05:51.031 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 11:51:33.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52878 1 109 1 2025-11-20 11:51:33.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48266 1 80 1 2025-11-20 11:51:33.714 00:00:00.000 UDP 28.104.0.1:48266 -> 198.28.0.2:53 1 64 1 2025-11-20 11:51:33.714 00:00:00.000 UDP 28.104.0.1:52878 -> 198.28.0.2:53 1 64 1 2025-11-20 11:48:00.865 00:05:08.552 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 11:52:34.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53383 1 80 1 2025-11-20 11:52:34.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55295 1 109 1 2025-11-20 11:52:34.385 00:00:00.000 UDP 28.104.0.1:55295 -> 198.28.0.2:53 1 64 1 2025-11-20 11:52:34.385 00:00:00.000 UDP 28.104.0.1:53383 -> 198.28.0.2:53 1 64 1 2025-11-20 11:53:35.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43495 1 80 1 2025-11-20 11:53:35.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47650 1 109 1 2025-11-20 11:53:35.296 00:00:00.000 UDP 28.104.0.1:47650 -> 198.28.0.2:53 1 64 1 2025-11-20 11:53:35.296 00:00:00.000 UDP 28.104.0.1:43495 -> 198.28.0.2:53 1 64 1 2025-11-20 11:49:09.885 00:05:50.971 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 11:54:35.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41992 1 109 1 2025-11-20 11:54:35.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34820 1 80 1 2025-11-20 11:54:35.592 00:00:00.000 UDP 28.104.0.1:41992 -> 198.28.0.2:53 1 64 1 2025-11-20 11:54:35.592 00:00:00.000 UDP 28.104.0.1:34820 -> 198.28.0.2:53 1 64 1 2025-11-20 11:55:18.041 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 11:55:36.566 00:00:00.000 UDP 28.104.0.1:32875 -> 198.28.0.2:53 1 64 1 2025-11-20 11:55:36.566 00:00:00.000 UDP 28.104.0.1:37807 -> 198.28.0.2:53 1 64 1 2025-11-20 11:55:36.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32875 1 109 1 2025-11-20 11:55:36.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37807 1 80 1 2025-11-20 11:51:48.460 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-11-20 11:52:00.857 00:05:08.572 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 11:52:09.419 00:05:00.588 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 11:56:36.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36525 1 109 1 2025-11-20 11:56:36.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49560 1 80 1 2025-11-20 11:56:36.858 00:00:00.000 UDP 28.104.0.1:36525 -> 198.28.0.2:53 1 64 1 2025-11-20 11:56:36.858 00:00:00.000 UDP 28.104.0.1:49560 -> 198.28.0.2:53 1 64 1 2025-11-20 11:52:09.878 00:05:51.030 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 11:52:09.418 00:06:00.221 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 11:57:37.159 00:00:00.000 UDP 28.104.0.1:54701 -> 198.28.0.2:53 1 64 1 2025-11-20 11:57:37.159 00:00:00.000 UDP 28.104.0.1:38243 -> 198.28.0.2:53 1 64 1 2025-11-20 11:57:37.168 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54701 1 80 1 2025-11-20 11:57:37.168 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38243 1 109 1 2025-11-20 11:54:00.867 00:05:08.552 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 11:58:37.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59990 1 80 1 2025-11-20 11:58:37.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44059 1 109 1 2025-11-20 11:58:37.508 00:00:00.000 UDP 28.104.0.1:44059 -> 198.28.0.2:53 1 64 1 2025-11-20 11:58:37.508 00:00:00.000 UDP 28.104.0.1:59990 -> 198.28.0.2:53 1 64 1 Summary: total flows: 321, total bytes: 94675, total packets: 1395, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-11-20 10:55:09 - 2025-11-20 11:59:09 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0028s User: 0.0028s Wall: 0.0032s flows/second: 101843.5 Runtime: 0.0032s