Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 14:54:09.457 00:06:00.250 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 14:59:47.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45023 1 109 1 2025-11-20 14:59:47.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40378 1 80 1 2025-11-20 14:59:47.943 00:00:00.000 UDP 28.104.0.1:40378 -> 198.28.0.2:53 1 64 1 2025-11-20 14:59:47.943 00:00:00.000 UDP 28.104.0.1:45023 -> 198.28.0.2:53 1 64 1 2025-11-20 14:55:09.936 00:05:51.011 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:00:21.526 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:00:48.252 00:00:00.000 UDP 28.104.0.1:51222 -> 198.28.0.2:53 1 64 1 2025-11-20 15:00:48.252 00:00:00.000 UDP 28.104.0.1:42990 -> 198.28.0.2:53 1 64 1 2025-11-20 15:00:48.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51222 1 109 1 2025-11-20 15:00:48.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42990 1 80 1 2025-11-20 15:01:48.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35585 1 109 1 2025-11-20 15:01:48.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46585 1 80 1 2025-11-20 15:01:48.543 00:00:00.000 UDP 28.104.0.1:46585 -> 198.28.0.2:53 1 64 1 2025-11-20 15:01:48.543 00:00:00.000 UDP 28.104.0.1:35585 -> 198.28.0.2:53 1 64 1 2025-11-20 14:58:09.458 00:05:00.654 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 14:58:00.940 00:05:08.529 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 14:58:08.738 00:05:05.110 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2548 1 2025-11-20 15:02:48.840 00:00:00.000 UDP 28.104.0.1:49113 -> 198.28.0.2:53 1 64 1 2025-11-20 15:02:48.840 00:00:00.000 UDP 28.104.0.1:34820 -> 198.28.0.2:53 1 64 1 2025-11-20 15:02:48.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49113 1 80 1 2025-11-20 15:02:48.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34820 1 109 1 2025-11-20 14:58:09.926 00:05:51.066 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:03:49.175 00:00:00.000 UDP 28.104.0.1:41632 -> 198.28.0.2:53 1 64 1 2025-11-20 15:03:49.175 00:00:00.000 UDP 28.104.0.1:50890 -> 198.28.0.2:53 1 64 1 2025-11-20 15:03:49.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50890 1 109 1 2025-11-20 15:03:49.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41632 1 80 1 2025-11-20 15:00:00.951 00:05:08.507 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:04:49.468 00:00:00.000 UDP 28.104.0.1:39701 -> 198.28.0.2:53 1 64 1 2025-11-20 15:04:49.468 00:00:00.000 UDP 28.104.0.1:52886 -> 198.28.0.2:53 1 64 1 2025-11-20 15:04:49.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52886 1 80 1 2025-11-20 15:04:49.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39701 1 109 1 2025-11-20 15:05:21.912 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:05:49.772 00:00:00.000 UDP 28.104.0.1:42437 -> 198.28.0.2:53 1 64 1 2025-11-20 15:05:49.772 00:00:00.000 UDP 28.104.0.1:34260 -> 198.28.0.2:53 1 64 1 2025-11-20 15:05:49.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42437 1 109 1 2025-11-20 15:05:49.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34260 1 80 1 2025-11-20 15:01:09.937 00:05:51.006 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:01:09.460 00:06:00.252 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:06:50.054 00:00:00.000 UDP 28.104.0.1:56509 -> 198.28.0.2:53 1 64 1 2025-11-20 15:06:50.054 00:00:00.000 UDP 28.104.0.1:54921 -> 198.28.0.2:53 1 64 1 2025-11-20 15:06:50.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54921 1 80 1 2025-11-20 15:06:50.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56509 1 109 1 2025-11-20 15:03:18.747 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 41 3144 1 2025-11-20 15:07:50.351 00:00:00.000 UDP 28.104.0.1:40766 -> 198.28.0.2:53 1 64 1 2025-11-20 15:07:50.351 00:00:00.000 UDP 28.104.0.1:47868 -> 198.28.0.2:53 1 64 1 2025-11-20 15:07:50.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47868 1 109 1 2025-11-20 15:07:50.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40766 1 80 1 2025-11-20 15:04:09.460 00:05:00.655 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:04:00.944 00:05:08.527 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:08:50.620 00:00:00.000 UDP 28.104.0.1:35022 -> 198.28.0.2:53 1 64 1 2025-11-20 15:08:50.619 00:00:00.000 UDP 28.104.0.1:48487 -> 198.28.0.2:53 1 64 1 2025-11-20 15:08:50.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48487 1 109 1 2025-11-20 15:08:50.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35022 1 80 1 2025-11-20 15:04:09.929 00:05:51.066 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:09:50.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35836 1 80 1 2025-11-20 15:09:50.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39470 1 109 1 2025-11-20 15:09:50.911 00:00:00.000 UDP 28.104.0.1:39470 -> 198.28.0.2:53 1 64 1 2025-11-20 15:09:50.911 00:00:00.000 UDP 28.104.0.1:35836 -> 198.28.0.2:53 1 64 1 2025-11-20 15:06:00.953 00:05:08.507 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:10:21.827 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:10:51.224 00:00:00.000 UDP 28.104.0.1:53802 -> 198.28.0.2:53 1 64 1 2025-11-20 15:10:51.224 00:00:00.000 UDP 28.104.0.1:56428 -> 198.28.0.2:53 1 64 1 2025-11-20 15:10:51.235 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56428 1 109 1 2025-11-20 15:10:51.235 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53802 1 80 1 2025-11-20 15:11:51.518 00:00:00.000 UDP 28.104.0.1:38073 -> 198.28.0.2:53 1 64 1 2025-11-20 15:11:51.517 00:00:00.000 UDP 28.104.0.1:59532 -> 198.28.0.2:53 1 64 1 2025-11-20 15:11:51.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38073 1 80 1 2025-11-20 15:11:51.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59532 1 109 1 2025-11-20 15:07:09.941 00:05:51.006 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:12:51.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54475 1 80 1 2025-11-20 15:12:51.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54745 1 109 1 2025-11-20 15:12:51.780 00:00:00.000 UDP 28.104.0.1:54475 -> 198.28.0.2:53 1 64 1 2025-11-20 15:08:38.752 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-11-20 15:12:51.780 00:00:00.000 UDP 28.104.0.1:54745 -> 198.28.0.2:53 1 64 1 2025-11-20 15:08:09.459 00:06:00.253 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:13:52.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34570 1 80 1 2025-11-20 15:13:52.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33082 1 109 1 2025-11-20 15:13:52.059 00:00:00.000 UDP 28.104.0.1:33082 -> 198.28.0.2:53 1 64 1 2025-11-20 15:13:52.059 00:00:00.000 UDP 28.104.0.1:34570 -> 198.28.0.2:53 1 64 1 2025-11-20 15:10:00.945 00:05:08.526 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:10:09.460 00:05:00.657 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:14:52.350 00:00:00.000 UDP 28.104.0.1:49584 -> 198.28.0.2:53 1 64 1 2025-11-20 15:14:52.350 00:00:00.000 UDP 28.104.0.1:53600 -> 198.28.0.2:53 1 64 1 2025-11-20 15:14:52.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53600 1 80 1 2025-11-20 15:14:52.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49584 1 109 1 2025-11-20 15:10:09.931 00:05:51.067 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:15:22.016 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:15:52.679 00:00:00.000 UDP 28.104.0.1:33401 -> 198.28.0.2:53 1 64 1 2025-11-20 15:15:52.678 00:00:00.000 UDP 28.104.0.1:40471 -> 198.28.0.2:53 1 64 1 2025-11-20 15:15:52.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33401 1 109 1 2025-11-20 15:15:52.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40471 1 80 1 2025-11-20 15:12:00.954 00:05:08.506 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:16:53.000 00:00:00.000 UDP 28.104.0.1:34667 -> 198.28.0.2:53 1 64 1 2025-11-20 15:16:52.998 00:00:00.000 UDP 28.104.0.1:52115 -> 198.28.0.2:53 1 64 1 2025-11-20 15:16:53.012 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52115 1 80 1 2025-11-20 15:16:53.012 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34667 1 109 1 2025-11-20 15:17:53.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38242 1 80 1 2025-11-20 15:17:53.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52221 1 109 1 2025-11-20 15:17:53.266 00:00:00.000 UDP 28.104.0.1:52221 -> 198.28.0.2:53 1 64 1 2025-11-20 15:17:53.266 00:00:00.000 UDP 28.104.0.1:38242 -> 198.28.0.2:53 1 64 1 2025-11-20 15:13:09.941 00:05:51.012 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:13:58.762 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-20 15:18:53.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45906 1 109 1 2025-11-20 15:18:53.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40940 1 80 1 2025-11-20 15:18:53.570 00:00:00.000 UDP 28.104.0.1:40940 -> 198.28.0.2:53 1 64 1 2025-11-20 15:18:53.570 00:00:00.000 UDP 28.104.0.1:45906 -> 198.28.0.2:53 1 64 1 2025-11-20 15:19:53.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54635 1 80 1 2025-11-20 15:19:53.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49972 1 109 1 2025-11-20 15:19:53.861 00:00:00.000 UDP 28.104.0.1:49972 -> 198.28.0.2:53 1 64 1 2025-11-20 15:19:53.861 00:00:00.000 UDP 28.104.0.1:54635 -> 198.28.0.2:53 1 64 1 2025-11-20 15:16:00.948 00:05:08.524 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:16:09.462 00:05:00.657 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:15:09.462 00:06:00.252 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:20:22.060 00:00:00.052 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:20:54.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39192 1 80 1 2025-11-20 15:20:54.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57984 1 109 1 2025-11-20 15:20:54.189 00:00:00.000 UDP 28.104.0.1:39192 -> 198.28.0.2:53 1 64 1 2025-11-20 15:20:54.189 00:00:00.000 UDP 28.104.0.1:57984 -> 198.28.0.2:53 1 64 1 2025-11-20 15:16:09.932 00:05:51.086 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:21:54.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55542 1 109 1 2025-11-20 15:21:54.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33110 1 80 1 2025-11-20 15:21:54.446 00:00:00.000 UDP 28.104.0.1:33110 -> 198.28.0.2:53 1 64 1 2025-11-20 15:21:54.446 00:00:00.000 UDP 28.104.0.1:55542 -> 198.28.0.2:53 1 64 1 2025-11-20 15:18:00.964 00:05:08.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:22:54.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39681 1 80 1 2025-11-20 15:22:54.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47117 1 109 1 2025-11-20 15:22:54.697 00:00:00.000 UDP 28.104.0.1:39681 -> 198.28.0.2:53 1 64 1 2025-11-20 15:22:54.697 00:00:00.000 UDP 28.104.0.1:47117 -> 198.28.0.2:53 1 64 1 2025-11-20 15:19:18.767 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-20 15:23:54.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56748 1 109 1 2025-11-20 15:23:54.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41483 1 80 1 2025-11-20 15:23:54.959 00:00:00.000 UDP 28.104.0.1:56748 -> 198.28.0.2:53 1 64 1 2025-11-20 15:23:54.960 00:00:00.000 UDP 28.104.0.1:41483 -> 198.28.0.2:53 1 64 1 2025-11-20 15:19:09.944 00:05:51.010 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:24:55.253 00:00:00.000 UDP 28.104.0.1:44866 -> 198.28.0.2:53 1 64 1 2025-11-20 15:24:55.253 00:00:00.000 UDP 28.104.0.1:57892 -> 198.28.0.2:53 1 64 1 2025-11-20 15:24:55.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44866 1 109 1 2025-11-20 15:24:55.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57892 1 80 1 2025-11-20 15:25:22.147 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:25:55.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42295 1 80 1 2025-11-20 15:25:55.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54525 1 109 1 2025-11-20 15:25:55.545 00:00:00.000 UDP 28.104.0.1:42295 -> 198.28.0.2:53 1 64 1 2025-11-20 15:25:55.545 00:00:00.000 UDP 28.104.0.1:54525 -> 198.28.0.2:53 1 64 1 2025-11-20 15:22:00.954 00:05:08.520 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:22:09.463 00:05:00.659 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:26:55.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50867 1 80 1 2025-11-20 15:26:55.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32851 1 109 1 2025-11-20 15:26:55.838 00:00:00.000 UDP 28.104.0.1:32851 -> 198.28.0.2:53 1 64 1 2025-11-20 15:26:55.838 00:00:00.000 UDP 28.104.0.1:50867 -> 198.28.0.2:53 1 64 1 2025-11-20 15:22:09.934 00:05:51.073 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:22:09.461 00:06:00.252 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:27:56.098 00:00:00.000 UDP 28.104.0.1:54693 -> 198.28.0.2:53 1 64 1 2025-11-20 15:27:56.098 00:00:00.000 UDP 28.104.0.1:46925 -> 198.28.0.2:53 1 64 1 2025-11-20 15:27:56.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46925 1 80 1 2025-11-20 15:27:56.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54693 1 109 1 2025-11-20 15:24:00.965 00:05:08.500 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:28:56.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60628 1 80 1 2025-11-20 15:28:56.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39123 1 109 1 2025-11-20 15:24:38.779 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-20 15:28:56.400 00:00:00.000 UDP 28.104.0.1:39123 -> 198.28.0.2:53 1 64 1 2025-11-20 15:28:56.400 00:00:00.000 UDP 28.104.0.1:60628 -> 198.28.0.2:53 1 64 1 2025-11-20 15:29:56.690 00:00:00.000 UDP 28.104.0.1:46817 -> 198.28.0.2:53 1 64 1 2025-11-20 15:29:56.690 00:00:00.000 UDP 28.104.0.1:37697 -> 198.28.0.2:53 1 64 1 2025-11-20 15:29:56.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37697 1 109 1 2025-11-20 15:29:56.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46817 1 80 1 2025-11-20 15:25:09.952 00:05:51.003 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:30:22.127 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:30:56.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37694 1 109 1 2025-11-20 15:30:56.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42434 1 80 1 2025-11-20 15:30:56.983 00:00:00.000 UDP 28.104.0.1:42434 -> 198.28.0.2:53 1 64 1 2025-11-20 15:30:56.983 00:00:00.000 UDP 28.104.0.1:37694 -> 198.28.0.2:53 1 64 1 2025-11-20 15:31:57.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33418 1 80 1 2025-11-20 15:31:57.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43418 1 109 1 2025-11-20 15:31:57.275 00:00:00.000 UDP 28.104.0.1:43418 -> 198.28.0.2:53 1 64 1 2025-11-20 15:31:57.275 00:00:00.000 UDP 28.104.0.1:33418 -> 198.28.0.2:53 1 64 1 2025-11-20 15:28:00.955 00:05:08.520 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:28:09.464 00:05:00.659 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:32:57.567 00:00:00.000 UDP 28.104.0.1:46615 -> 198.28.0.2:53 1 64 1 2025-11-20 15:32:57.567 00:00:00.000 UDP 28.104.0.1:47132 -> 198.28.0.2:53 1 64 1 2025-11-20 15:32:57.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46615 1 80 1 2025-11-20 15:32:57.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47132 1 109 1 2025-11-20 15:28:09.941 00:05:51.067 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:33:57.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33179 1 80 1 2025-11-20 15:33:57.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40917 1 109 1 2025-11-20 15:33:57.872 00:00:00.000 UDP 28.104.0.1:33179 -> 198.28.0.2:53 1 64 1 2025-11-20 15:33:57.872 00:00:00.000 UDP 28.104.0.1:40917 -> 198.28.0.2:53 1 64 1 2025-11-20 15:30:00.965 00:05:08.502 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:29:09.465 00:06:00.251 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:29:58.785 00:05:10.017 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2924 1 2025-11-20 15:34:58.143 00:00:00.000 UDP 28.104.0.1:48074 -> 198.28.0.2:53 1 64 1 2025-11-20 15:34:58.143 00:00:00.000 UDP 28.104.0.1:58170 -> 198.28.0.2:53 1 64 1 2025-11-20 15:34:58.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58170 1 109 1 2025-11-20 15:34:58.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48074 1 80 1 2025-11-20 15:35:22.462 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:35:58.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54990 1 109 1 2025-11-20 15:35:58.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37439 1 80 1 2025-11-20 15:35:58.436 00:00:00.000 UDP 28.104.0.1:37439 -> 198.28.0.2:53 1 64 1 2025-11-20 15:35:58.436 00:00:00.000 UDP 28.104.0.1:54990 -> 198.28.0.2:53 1 64 1 2025-11-20 15:31:09.953 00:05:51.006 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:36:58.726 00:00:00.000 UDP 28.104.0.1:36517 -> 198.28.0.2:53 1 64 1 2025-11-20 15:36:58.726 00:00:00.000 UDP 28.104.0.1:44307 -> 198.28.0.2:53 1 64 1 2025-11-20 15:36:58.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44307 1 109 1 2025-11-20 15:36:58.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36517 1 80 1 2025-11-20 15:37:59.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51027 1 80 1 2025-11-20 15:37:59.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37676 1 109 1 2025-11-20 15:37:59.643 00:00:00.000 UDP 28.104.0.1:37676 -> 198.28.0.2:53 1 64 1 2025-11-20 15:37:59.643 00:00:00.000 UDP 28.104.0.1:51027 -> 198.28.0.2:53 1 64 1 2025-11-20 15:34:09.466 00:05:00.658 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:34:00.959 00:05:08.519 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:38:59.941 00:00:00.000 UDP 28.104.0.1:57382 -> 198.28.0.2:53 1 64 1 2025-11-20 15:34:09.943 00:05:51.069 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:38:59.941 00:00:00.000 UDP 28.104.0.1:38937 -> 198.28.0.2:53 1 64 1 2025-11-20 15:38:59.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38937 1 109 1 2025-11-20 15:38:59.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57382 1 80 1 2025-11-20 15:35:18.798 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2916 1 2025-11-20 15:40:00.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43586 1 109 1 2025-11-20 15:40:00.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54087 1 80 1 2025-11-20 15:40:00.238 00:00:00.000 UDP 28.104.0.1:43586 -> 198.28.0.2:53 1 64 1 2025-11-20 15:40:00.238 00:00:00.000 UDP 28.104.0.1:54087 -> 198.28.0.2:53 1 64 1 2025-11-20 15:36:00.968 00:05:08.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:40:22.358 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:41:00.536 00:00:00.000 UDP 28.104.0.1:59825 -> 198.28.0.2:53 1 64 1 2025-11-20 15:41:00.537 00:00:00.000 UDP 28.104.0.1:34352 -> 198.28.0.2:53 1 64 1 2025-11-20 15:41:00.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59825 1 80 1 2025-11-20 15:41:00.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34352 1 109 1 2025-11-20 15:36:09.467 00:06:00.251 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:42:00.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32948 1 109 1 2025-11-20 15:42:00.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38607 1 80 1 2025-11-20 15:37:09.953 00:05:51.007 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:42:00.827 00:00:00.000 UDP 28.104.0.1:32948 -> 198.28.0.2:53 1 64 1 2025-11-20 15:42:00.827 00:00:00.000 UDP 28.104.0.1:38607 -> 198.28.0.2:53 1 64 1 2025-11-20 15:43:01.130 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58081 1 80 1 2025-11-20 15:43:01.130 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60144 1 109 1 2025-11-20 15:43:01.120 00:00:00.000 UDP 28.104.0.1:58081 -> 198.28.0.2:53 1 64 1 2025-11-20 15:43:01.120 00:00:00.000 UDP 28.104.0.1:60144 -> 198.28.0.2:53 1 64 1 2025-11-20 15:44:01.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48629 1 80 1 2025-11-20 15:44:01.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48005 1 109 1 2025-11-20 15:44:01.410 00:00:00.000 UDP 28.104.0.1:48005 -> 198.28.0.2:53 1 64 1 2025-11-20 15:44:01.410 00:00:00.000 UDP 28.104.0.1:48629 -> 198.28.0.2:53 1 64 1 2025-11-20 15:40:09.467 00:05:00.657 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:40:00.959 00:05:08.518 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:40:38.804 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-20 15:45:01.667 00:00:00.000 UDP 28.104.0.1:49524 -> 198.28.0.2:53 1 64 1 2025-11-20 15:40:09.944 00:05:51.070 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:45:01.667 00:00:00.000 UDP 28.104.0.1:51749 -> 198.28.0.2:53 1 64 1 2025-11-20 15:45:01.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49524 1 80 1 2025-11-20 15:45:01.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51749 1 109 1 2025-11-20 15:45:22.620 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:46:01.959 00:00:00.000 UDP 28.104.0.1:41764 -> 198.28.0.2:53 1 64 1 2025-11-20 15:46:01.959 00:00:00.000 UDP 28.104.0.1:53999 -> 198.28.0.2:53 1 64 1 2025-11-20 15:46:01.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41764 1 80 1 2025-11-20 15:46:01.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53999 1 109 1 2025-11-20 15:42:00.970 00:05:08.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:47:02.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52586 1 80 1 2025-11-20 15:47:02.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42957 1 109 1 2025-11-20 15:47:02.255 00:00:00.000 UDP 28.104.0.1:52586 -> 198.28.0.2:53 1 64 1 2025-11-20 15:47:02.255 00:00:00.000 UDP 28.104.0.1:42957 -> 198.28.0.2:53 1 64 1 2025-11-20 15:48:02.837 00:00:00.000 UDP 28.104.0.1:55935 -> 198.28.0.2:53 1 64 1 2025-11-20 15:48:02.837 00:00:00.000 UDP 28.104.0.1:33353 -> 198.28.0.2:53 1 64 1 2025-11-20 15:43:09.954 00:05:51.009 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:48:02.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55935 1 80 1 2025-11-20 15:48:02.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33353 1 109 1 2025-11-20 15:43:09.468 00:06:00.251 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:49:03.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44044 1 109 1 2025-11-20 15:49:03.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39509 1 80 1 2025-11-20 15:49:03.168 00:00:00.000 UDP 28.104.0.1:44044 -> 198.28.0.2:53 1 64 1 2025-11-20 15:49:03.169 00:00:00.000 UDP 28.104.0.1:39509 -> 198.28.0.2:53 1 64 1 2025-11-20 15:50:03.430 00:00:00.000 UDP 28.104.0.1:43192 -> 198.28.0.2:53 1 64 1 2025-11-20 15:50:03.430 00:00:00.000 UDP 28.104.0.1:41605 -> 198.28.0.2:53 1 64 1 2025-11-20 15:50:03.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43192 1 109 1 2025-11-20 15:50:03.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41605 1 80 1 2025-11-20 15:46:09.467 00:05:00.659 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:45:58.808 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-20 15:46:00.962 00:05:08.517 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:50:23.244 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:51:03.723 00:00:00.000 UDP 28.104.0.1:52807 -> 198.28.0.2:53 1 64 1 2025-11-20 15:46:09.944 00:05:51.069 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:51:03.723 00:00:00.000 UDP 28.104.0.1:54428 -> 198.28.0.2:53 1 64 1 2025-11-20 15:51:03.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52807 1 109 1 2025-11-20 15:51:03.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54428 1 80 1 2025-11-20 15:52:04.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40830 1 109 1 2025-11-20 15:52:04.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60499 1 80 1 2025-11-20 15:52:04.048 00:00:00.000 UDP 28.104.0.1:40830 -> 198.28.0.2:53 1 64 1 2025-11-20 15:52:04.048 00:00:00.000 UDP 28.104.0.1:60499 -> 198.28.0.2:53 1 64 1 2025-11-20 15:48:00.971 00:05:08.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:53:04.347 00:00:00.000 UDP 28.104.0.1:39597 -> 198.28.0.2:53 1 64 1 2025-11-20 15:53:04.347 00:00:00.000 UDP 28.104.0.1:48151 -> 198.28.0.2:53 1 64 1 2025-11-20 15:53:04.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48151 1 109 1 2025-11-20 15:53:04.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39597 1 80 1 2025-11-20 15:49:09.957 00:05:51.008 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:54:04.640 00:00:00.000 UDP 28.104.0.1:36582 -> 198.28.0.2:53 1 64 1 2025-11-20 15:54:04.640 00:00:00.000 UDP 28.104.0.1:44900 -> 198.28.0.2:53 1 64 1 2025-11-20 15:54:04.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36582 1 80 1 2025-11-20 15:54:04.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44900 1 109 1 2025-11-20 15:55:04.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59714 1 109 1 2025-11-20 15:55:04.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52840 1 80 1 2025-11-20 15:55:04.931 00:00:00.000 UDP 28.104.0.1:59714 -> 198.28.0.2:53 1 64 1 2025-11-20 15:55:04.931 00:00:00.000 UDP 28.104.0.1:52840 -> 198.28.0.2:53 1 64 1 2025-11-20 15:50:09.468 00:06:00.254 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:55:22.815 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:51:18.816 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-20 15:56:05.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35957 1 80 1 2025-11-20 15:56:05.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37530 1 109 1 2025-11-20 15:56:05.239 00:00:00.000 UDP 28.104.0.1:35957 -> 198.28.0.2:53 1 64 1 2025-11-20 15:56:05.240 00:00:00.000 UDP 28.104.0.1:37530 -> 198.28.0.2:53 1 64 1 2025-11-20 15:52:00.963 00:05:08.521 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:52:09.471 00:05:00.657 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:52:09.947 00:05:51.069 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:57:05.531 00:00:00.000 UDP 28.104.0.1:38029 -> 198.28.0.2:53 1 64 1 2025-11-20 15:57:05.531 00:00:00.000 UDP 28.104.0.1:38859 -> 198.28.0.2:53 1 64 1 2025-11-20 15:57:05.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38859 1 109 1 2025-11-20 15:57:05.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38029 1 80 1 2025-11-20 15:58:05.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42087 1 80 1 2025-11-20 15:58:05.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48489 1 109 1 2025-11-20 15:58:05.826 00:00:00.000 UDP 28.104.0.1:48489 -> 198.28.0.2:53 1 64 1 2025-11-20 15:58:05.826 00:00:00.000 UDP 28.104.0.1:42087 -> 198.28.0.2:53 1 64 1 2025-11-20 15:54:00.973 00:05:08.500 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 Summary: total flows: 318, total bytes: 94460, total packets: 1395, avg bps: 193, avg pps: 0, avg bpp: 67 Time window: 2025-11-20 14:54:09 - 2025-11-20 15:59:09 Total flows processed: 318, passed: 318, Blocks skipped: 0, Bytes read: 33136 Sys: 0.0048s User: 0.0019s Wall: 0.0038s flows/second: 83117.6 Runtime: 0.0038s