Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 16:55:08.915 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 3068 1 2025-11-20 16:59:34.620 00:00:00.000 UDP 28.104.0.1:38262 -> 198.28.0.2:53 1 64 1 2025-11-20 16:59:34.620 00:00:00.000 UDP 28.104.0.1:38458 -> 198.28.0.2:53 1 64 1 2025-11-20 16:59:34.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38458 1 80 1 2025-11-20 16:59:34.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38262 1 109 1 2025-11-20 16:55:09.976 00:05:51.026 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 17:00:23.990 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:00:34.912 00:00:00.000 UDP 28.104.0.1:54376 -> 198.28.0.2:53 1 64 1 2025-11-20 17:00:34.912 00:00:00.000 UDP 28.104.0.1:49366 -> 198.28.0.2:53 1 64 1 2025-11-20 17:00:34.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54376 1 109 1 2025-11-20 17:00:34.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49366 1 80 1 2025-11-20 17:01:35.195 00:00:00.000 UDP 28.104.0.1:47026 -> 198.28.0.2:53 1 64 1 2025-11-20 17:01:35.195 00:00:00.000 UDP 28.104.0.1:50979 -> 198.28.0.2:53 1 64 1 2025-11-20 17:01:35.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47026 1 80 1 2025-11-20 17:01:35.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50979 1 109 1 2025-11-20 16:57:09.496 00:05:51.508 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 16:58:09.485 00:05:00.662 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 17:02:35.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39748 1 109 1 2025-11-20 17:02:35.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53633 1 80 1 2025-11-20 17:02:35.486 00:00:00.000 UDP 28.104.0.1:39748 -> 198.28.0.2:53 1 64 1 2025-11-20 17:02:35.486 00:00:00.000 UDP 28.104.0.1:53633 -> 198.28.0.2:53 1 64 1 2025-11-20 16:58:09.966 00:05:51.087 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 17:03:35.779 00:00:00.000 UDP 28.104.0.1:49102 -> 198.28.0.2:53 1 64 1 2025-11-20 17:03:35.779 00:00:00.000 UDP 28.104.0.1:45128 -> 198.28.0.2:53 1 64 1 2025-11-20 17:03:35.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45128 1 80 1 2025-11-20 17:03:35.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49102 1 109 1 2025-11-20 16:59:09.484 00:05:51.528 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 17:04:36.076 00:00:00.000 UDP 28.104.0.1:40047 -> 198.28.0.2:53 1 64 1 2025-11-20 17:04:36.077 00:00:00.000 UDP 28.104.0.1:47414 -> 198.28.0.2:53 1 64 1 2025-11-20 17:04:36.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40047 1 109 1 2025-11-20 17:04:36.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47414 1 80 1 2025-11-20 17:00:28.920 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2908 1 2025-11-20 17:00:09.486 00:06:00.260 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 17:05:24.249 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:05:36.369 00:00:00.000 UDP 28.104.0.1:44640 -> 198.28.0.2:53 1 64 1 2025-11-20 17:05:36.369 00:00:00.000 UDP 28.104.0.1:51467 -> 198.28.0.2:53 1 64 1 2025-11-20 17:05:36.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44640 1 80 1 2025-11-20 17:05:36.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51467 1 109 1 2025-11-20 17:01:09.976 00:05:51.027 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 17:06:36.621 00:00:00.000 UDP 28.104.0.1:41301 -> 198.28.0.2:53 1 64 1 2025-11-20 17:06:36.621 00:00:00.000 UDP 28.104.0.1:53654 -> 198.28.0.2:53 1 64 1 2025-11-20 17:06:36.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41301 1 109 1 2025-11-20 17:06:36.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53654 1 80 1 2025-11-20 17:07:36.910 00:00:00.000 UDP 28.104.0.1:38626 -> 198.28.0.2:53 1 64 1 2025-11-20 17:07:36.910 00:00:00.000 UDP 28.104.0.1:56058 -> 198.28.0.2:53 1 64 1 2025-11-20 17:07:36.920 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56058 1 80 1 2025-11-20 17:07:36.920 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38626 1 109 1 2025-11-20 17:03:09.496 00:05:51.508 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 17:04:09.486 00:05:00.664 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 17:08:37.213 00:00:00.000 UDP 28.104.0.1:49701 -> 198.28.0.2:53 1 64 1 2025-11-20 17:08:37.213 00:00:00.000 UDP 28.104.0.1:34554 -> 198.28.0.2:53 1 64 1 2025-11-20 17:08:37.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34554 1 80 1 2025-11-20 17:08:37.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49701 1 109 1 2025-11-20 17:04:09.969 00:05:51.085 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 17:09:37.508 00:00:00.000 UDP 28.104.0.1:41066 -> 198.28.0.2:53 1 64 1 2025-11-20 17:09:37.508 00:00:00.000 UDP 28.104.0.1:36615 -> 198.28.0.2:53 1 64 1 2025-11-20 17:09:37.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36615 1 80 1 2025-11-20 17:09:37.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41066 1 109 1 2025-11-20 17:05:09.487 00:05:51.528 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 17:05:48.932 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 17:10:24.340 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:10:37.808 00:00:00.000 UDP 28.104.0.1:52855 -> 198.28.0.2:53 1 64 1 2025-11-20 17:10:37.808 00:00:00.000 UDP 28.104.0.1:43850 -> 198.28.0.2:53 1 64 1 2025-11-20 17:10:37.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43850 1 109 1 2025-11-20 17:10:37.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52855 1 80 1 2025-11-20 17:11:38.103 00:00:00.000 UDP 28.104.0.1:52154 -> 198.28.0.2:53 1 64 1 2025-11-20 17:11:38.103 00:00:00.000 UDP 28.104.0.1:49463 -> 198.28.0.2:53 1 64 1 2025-11-20 17:11:38.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52154 1 80 1 2025-11-20 17:11:38.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49463 1 109 1 2025-11-20 17:07:09.976 00:05:51.028 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 17:07:09.486 00:06:00.260 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 17:12:38.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50727 1 109 1 2025-11-20 17:12:38.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48024 1 80 1 2025-11-20 17:12:38.362 00:00:00.000 UDP 28.104.0.1:48024 -> 198.28.0.2:53 1 64 1 2025-11-20 17:12:38.362 00:00:00.000 UDP 28.104.0.1:50727 -> 198.28.0.2:53 1 64 1 2025-11-20 17:13:38.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40096 1 80 1 2025-11-20 17:13:38.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54159 1 109 1 2025-11-20 17:13:38.682 00:00:00.000 UDP 28.104.0.1:40096 -> 198.28.0.2:53 1 64 1 2025-11-20 17:13:38.682 00:00:00.000 UDP 28.104.0.1:54159 -> 198.28.0.2:53 1 64 1 2025-11-20 17:09:09.497 00:05:51.508 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 17:10:09.487 00:05:00.663 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 17:14:38.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35735 1 109 1 2025-11-20 17:14:38.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36670 1 80 1 2025-11-20 17:14:38.976 00:00:00.000 UDP 28.104.0.1:35735 -> 198.28.0.2:53 1 64 1 2025-11-20 17:14:38.976 00:00:00.000 UDP 28.104.0.1:36670 -> 198.28.0.2:53 1 64 1 2025-11-20 17:10:09.967 00:05:51.087 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 17:11:08.936 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-20 17:15:24.448 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:15:39.242 00:00:00.000 UDP 28.104.0.1:48543 -> 198.28.0.2:53 1 64 1 2025-11-20 17:15:39.242 00:00:00.000 UDP 28.104.0.1:48280 -> 198.28.0.2:53 1 64 1 2025-11-20 17:15:39.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48543 1 109 1 2025-11-20 17:15:39.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48280 1 80 1 2025-11-20 17:11:09.486 00:05:51.528 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 17:16:39.559 00:00:00.000 UDP 28.104.0.1:47284 -> 198.28.0.2:53 1 64 1 2025-11-20 17:16:39.559 00:00:00.000 UDP 28.104.0.1:36301 -> 198.28.0.2:53 1 64 1 2025-11-20 17:16:39.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47284 1 109 1 2025-11-20 17:16:39.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36301 1 80 1 2025-11-20 17:17:39.861 00:00:00.000 UDP 28.104.0.1:43075 -> 198.28.0.2:53 1 64 1 2025-11-20 17:17:39.861 00:00:00.000 UDP 28.104.0.1:35968 -> 198.28.0.2:53 1 64 1 2025-11-20 17:17:39.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35968 1 109 1 2025-11-20 17:17:39.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43075 1 80 1 2025-11-20 17:13:09.980 00:05:51.026 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 17:18:40.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43122 1 80 1 2025-11-20 17:18:40.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60350 1 109 1 2025-11-20 17:18:40.157 00:00:00.000 UDP 28.104.0.1:60350 -> 198.28.0.2:53 1 64 1 2025-11-20 17:18:40.157 00:00:00.000 UDP 28.104.0.1:43122 -> 198.28.0.2:53 1 64 1 2025-11-20 17:14:09.487 00:06:00.275 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 17:19:40.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34504 1 109 1 2025-11-20 17:19:40.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45197 1 80 1 2025-11-20 17:19:40.450 00:00:00.000 UDP 28.104.0.1:45197 -> 198.28.0.2:53 1 64 1 2025-11-20 17:19:40.450 00:00:00.000 UDP 28.104.0.1:34504 -> 198.28.0.2:53 1 64 1 2025-11-20 17:15:09.499 00:05:51.508 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 17:16:09.487 00:05:00.668 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 17:20:24.500 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:20:40.801 00:00:00.000 UDP 28.104.0.1:58895 -> 198.28.0.2:53 1 64 1 2025-11-20 17:16:28.937 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-20 17:20:40.801 00:00:00.000 UDP 28.104.0.1:48269 -> 198.28.0.2:53 1 64 1 2025-11-20 17:20:40.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48269 1 109 1 2025-11-20 17:20:40.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58895 1 80 1 2025-11-20 17:16:09.970 00:05:51.085 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 17:21:41.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33719 1 109 1 2025-11-20 17:21:41.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45653 1 80 1 2025-11-20 17:21:41.059 00:00:00.000 UDP 28.104.0.1:33719 -> 198.28.0.2:53 1 64 1 2025-11-20 17:21:41.059 00:00:00.000 UDP 28.104.0.1:45653 -> 198.28.0.2:53 1 64 1 2025-11-20 17:17:09.490 00:05:51.526 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 17:22:41.360 00:00:00.000 UDP 28.104.0.1:60143 -> 198.28.0.2:53 1 64 1 2025-11-20 17:22:41.360 00:00:00.000 UDP 28.104.0.1:38278 -> 198.28.0.2:53 1 64 1 2025-11-20 17:22:41.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38278 1 80 1 2025-11-20 17:22:41.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60143 1 109 1 2025-11-20 17:23:41.651 00:00:00.000 UDP 28.104.0.1:36484 -> 198.28.0.2:53 1 64 1 2025-11-20 17:23:41.652 00:00:00.000 UDP 28.104.0.1:60367 -> 198.28.0.2:53 1 64 1 2025-11-20 17:23:41.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60367 1 80 1 2025-11-20 17:23:41.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36484 1 109 1 2025-11-20 17:19:09.980 00:05:51.026 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 17:24:41.950 00:00:00.000 UDP 28.104.0.1:57936 -> 198.28.0.2:53 1 64 1 2025-11-20 17:24:41.950 00:00:00.000 UDP 28.104.0.1:59425 -> 198.28.0.2:53 1 64 1 2025-11-20 17:24:41.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59425 1 80 1 2025-11-20 17:24:41.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57936 1 109 1 2025-11-20 17:25:24.807 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:25:43.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48844 1 80 1 2025-11-20 17:25:43.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34052 1 109 1 2025-11-20 17:25:43.097 00:00:00.000 UDP 28.104.0.1:48844 -> 198.28.0.2:53 1 64 1 2025-11-20 17:25:43.097 00:00:00.000 UDP 28.104.0.1:34052 -> 198.28.0.2:53 1 64 1 2025-11-20 17:21:09.501 00:05:51.506 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 17:21:48.942 00:05:10.015 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2616 1 2025-11-20 17:22:09.491 00:05:00.666 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 17:21:09.491 00:06:00.272 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 17:26:43.396 00:00:00.000 UDP 28.104.0.1:60461 -> 198.28.0.2:53 1 64 1 2025-11-20 17:26:43.396 00:00:00.000 UDP 28.104.0.1:50335 -> 198.28.0.2:53 1 64 1 2025-11-20 17:26:43.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50335 1 80 1 2025-11-20 17:26:43.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60461 1 109 1 2025-11-20 17:22:09.970 00:05:51.086 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 17:27:43.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34126 1 80 1 2025-11-20 17:27:43.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40137 1 109 1 2025-11-20 17:27:43.684 00:00:00.000 UDP 28.104.0.1:34126 -> 198.28.0.2:53 1 64 1 2025-11-20 17:27:43.684 00:00:00.000 UDP 28.104.0.1:40137 -> 198.28.0.2:53 1 64 1 2025-11-20 17:23:09.491 00:05:51.527 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 17:28:43.980 00:00:00.000 UDP 28.104.0.1:58562 -> 198.28.0.2:53 1 64 1 2025-11-20 17:28:43.980 00:00:00.000 UDP 28.104.0.1:54897 -> 198.28.0.2:53 1 64 1 2025-11-20 17:28:43.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58562 1 80 1 2025-11-20 17:28:43.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54897 1 109 1 2025-11-20 17:29:44.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45489 1 109 1 2025-11-20 17:29:44.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60283 1 80 1 2025-11-20 17:29:44.233 00:00:00.000 UDP 28.104.0.1:45489 -> 198.28.0.2:53 1 64 1 2025-11-20 17:29:44.233 00:00:00.000 UDP 28.104.0.1:60283 -> 198.28.0.2:53 1 64 1 2025-11-20 17:25:09.982 00:05:51.026 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 17:30:24.518 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:30:44.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54715 1 80 1 2025-11-20 17:30:44.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60730 1 109 1 2025-11-20 17:30:44.537 00:00:00.000 UDP 28.104.0.1:54715 -> 198.28.0.2:53 1 64 1 2025-11-20 17:30:44.538 00:00:00.000 UDP 28.104.0.1:60730 -> 198.28.0.2:53 1 64 1 2025-11-20 17:27:08.957 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 42 3224 1 2025-11-20 17:31:44.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44984 1 80 1 2025-11-20 17:31:44.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42704 1 109 1 2025-11-20 17:31:44.834 00:00:00.000 UDP 28.104.0.1:44984 -> 198.28.0.2:53 1 64 1 2025-11-20 17:31:44.834 00:00:00.000 UDP 28.104.0.1:42704 -> 198.28.0.2:53 1 64 1 2025-11-20 17:27:09.502 00:05:51.506 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 17:28:09.493 00:05:00.664 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 17:32:45.136 00:00:00.000 UDP 28.104.0.1:58186 -> 198.28.0.2:53 1 64 1 2025-11-20 17:32:45.136 00:00:00.000 UDP 28.104.0.1:43142 -> 198.28.0.2:53 1 64 1 2025-11-20 17:32:45.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58186 1 109 1 2025-11-20 17:32:45.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43142 1 80 1 2025-11-20 17:28:09.973 00:05:51.085 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 17:28:09.493 00:06:00.270 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 17:33:45.441 00:00:00.000 UDP 28.104.0.1:38295 -> 198.28.0.2:53 1 64 1 2025-11-20 17:33:45.442 00:00:00.000 UDP 28.104.0.1:57865 -> 198.28.0.2:53 1 64 1 2025-11-20 17:33:45.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57865 1 80 1 2025-11-20 17:33:45.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38295 1 109 1 2025-11-20 17:29:09.493 00:05:51.537 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 17:34:45.751 00:00:00.000 UDP 28.104.0.1:55025 -> 198.28.0.2:53 1 64 1 2025-11-20 17:34:45.750 00:00:00.000 UDP 28.104.0.1:57180 -> 198.28.0.2:53 1 64 1 2025-11-20 17:34:45.762 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55025 1 80 1 2025-11-20 17:34:45.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57180 1 109 1 2025-11-20 17:35:24.863 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:35:46.052 00:00:00.000 UDP 28.104.0.1:48886 -> 198.28.0.2:53 1 64 1 2025-11-20 17:35:46.052 00:00:00.000 UDP 28.104.0.1:50866 -> 198.28.0.2:53 1 64 1 2025-11-20 17:35:46.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48886 1 109 1 2025-11-20 17:35:46.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50866 1 80 1 2025-11-20 17:31:09.983 00:05:51.027 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 17:32:28.966 00:05:10.016 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-20 17:36:46.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47042 1 109 1 2025-11-20 17:36:46.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43826 1 80 1 2025-11-20 17:36:46.353 00:00:00.000 UDP 28.104.0.1:43826 -> 198.28.0.2:53 1 64 1 2025-11-20 17:36:46.354 00:00:00.000 UDP 28.104.0.1:47042 -> 198.28.0.2:53 1 64 1 2025-11-20 17:37:46.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37154 1 109 1 2025-11-20 17:37:46.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37085 1 80 1 2025-11-20 17:37:46.658 00:00:00.000 UDP 28.104.0.1:37085 -> 198.28.0.2:53 1 64 1 2025-11-20 17:37:46.657 00:00:00.000 UDP 28.104.0.1:37154 -> 198.28.0.2:53 1 64 1 2025-11-20 17:33:09.504 00:05:51.532 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 17:34:09.495 00:05:00.664 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 17:38:46.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48538 1 109 1 2025-11-20 17:38:46.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39602 1 80 1 2025-11-20 17:38:46.916 00:00:00.000 UDP 28.104.0.1:48538 -> 198.28.0.2:53 1 64 1 2025-11-20 17:38:46.916 00:00:00.000 UDP 28.104.0.1:39602 -> 198.28.0.2:53 1 64 1 2025-11-20 17:34:09.973 00:05:51.127 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 17:39:47.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34287 1 80 1 2025-11-20 17:39:47.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40044 1 109 1 2025-11-20 17:39:47.234 00:00:00.000 UDP 28.104.0.1:40044 -> 198.28.0.2:53 1 64 1 2025-11-20 17:39:47.234 00:00:00.000 UDP 28.104.0.1:34287 -> 198.28.0.2:53 1 64 1 2025-11-20 17:35:09.495 00:05:51.554 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 17:35:09.495 00:06:00.270 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 17:40:24.931 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:40:48.113 00:00:00.000 UDP 28.104.0.1:60801 -> 198.28.0.2:53 1 64 1 2025-11-20 17:40:48.113 00:00:00.000 UDP 28.104.0.1:42003 -> 198.28.0.2:53 1 64 1 2025-11-20 17:40:48.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60801 1 80 1 2025-11-20 17:40:48.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42003 1 109 1 2025-11-20 17:41:48.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60862 1 109 1 2025-11-20 17:41:48.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56191 1 80 1 2025-11-20 17:41:48.420 00:00:00.000 UDP 28.104.0.1:60862 -> 198.28.0.2:53 1 64 1 2025-11-20 17:41:48.420 00:00:00.000 UDP 28.104.0.1:56191 -> 198.28.0.2:53 1 64 1 2025-11-20 17:37:48.976 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-20 17:37:09.984 00:05:51.056 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 17:42:48.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52221 1 80 1 2025-11-20 17:42:48.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42383 1 109 1 2025-11-20 17:42:48.717 00:00:00.000 UDP 28.104.0.1:52221 -> 198.28.0.2:53 1 64 1 2025-11-20 17:42:48.716 00:00:00.000 UDP 28.104.0.1:42383 -> 198.28.0.2:53 1 64 1 2025-11-20 17:43:48.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48895 1 80 1 2025-11-20 17:43:48.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45398 1 109 1 2025-11-20 17:43:48.977 00:00:00.000 UDP 28.104.0.1:48895 -> 198.28.0.2:53 1 64 1 2025-11-20 17:43:48.977 00:00:00.000 UDP 28.104.0.1:45398 -> 198.28.0.2:53 1 64 1 2025-11-20 17:39:09.506 00:05:51.535 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 17:40:09.497 00:05:00.665 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 17:44:49.274 00:00:00.000 UDP 28.104.0.1:42260 -> 198.28.0.2:53 1 64 1 2025-11-20 17:44:49.274 00:00:00.000 UDP 28.104.0.1:38642 -> 198.28.0.2:53 1 64 1 2025-11-20 17:44:49.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42260 1 80 1 2025-11-20 17:44:49.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38642 1 109 1 2025-11-20 17:40:09.975 00:05:51.117 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 17:45:25.001 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:45:49.562 00:00:00.000 UDP 28.104.0.1:36773 -> 198.28.0.2:53 1 64 1 2025-11-20 17:45:49.562 00:00:00.000 UDP 28.104.0.1:43347 -> 198.28.0.2:53 1 64 1 2025-11-20 17:45:49.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43347 1 109 1 2025-11-20 17:45:49.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36773 1 80 1 2025-11-20 17:41:09.498 00:05:51.556 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 17:46:49.855 00:00:00.000 UDP 28.104.0.1:32928 -> 198.28.0.2:53 1 64 1 2025-11-20 17:46:49.855 00:00:00.000 UDP 28.104.0.1:39769 -> 198.28.0.2:53 1 64 1 2025-11-20 17:46:49.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39769 1 80 1 2025-11-20 17:46:49.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32928 1 109 1 2025-11-20 17:42:09.497 00:06:00.272 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 17:43:08.987 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 17:47:50.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48891 1 80 1 2025-11-20 17:47:50.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53521 1 109 1 2025-11-20 17:47:50.131 00:00:00.000 UDP 28.104.0.1:53521 -> 198.28.0.2:53 1 64 1 2025-11-20 17:47:50.131 00:00:00.000 UDP 28.104.0.1:48891 -> 198.28.0.2:53 1 64 1 2025-11-20 17:43:09.986 00:05:51.058 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 17:48:50.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51668 1 80 1 2025-11-20 17:48:50.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58618 1 109 1 2025-11-20 17:48:50.420 00:00:00.000 UDP 28.104.0.1:51668 -> 198.28.0.2:53 1 64 1 2025-11-20 17:48:50.420 00:00:00.000 UDP 28.104.0.1:58618 -> 198.28.0.2:53 1 64 1 2025-11-20 17:49:51.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38449 1 80 1 2025-11-20 17:49:51.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32878 1 109 1 2025-11-20 17:49:51.248 00:00:00.000 UDP 28.104.0.1:38449 -> 198.28.0.2:53 1 64 1 2025-11-20 17:49:51.248 00:00:00.000 UDP 28.104.0.1:32878 -> 198.28.0.2:53 1 64 1 2025-11-20 17:45:09.508 00:05:51.560 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 17:46:09.498 00:05:00.665 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 17:50:25.844 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:50:51.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44584 1 80 1 2025-11-20 17:50:51.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60804 1 109 1 2025-11-20 17:50:51.543 00:00:00.000 UDP 28.104.0.1:44584 -> 198.28.0.2:53 1 64 1 2025-11-20 17:50:51.543 00:00:00.000 UDP 28.104.0.1:60804 -> 198.28.0.2:53 1 64 1 2025-11-20 17:46:09.976 00:05:51.143 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 17:51:51.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53025 1 109 1 2025-11-20 17:51:51.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52215 1 80 1 2025-11-20 17:51:51.800 00:00:00.000 UDP 28.104.0.1:53025 -> 198.28.0.2:53 1 64 1 2025-11-20 17:51:51.800 00:00:00.000 UDP 28.104.0.1:52215 -> 198.28.0.2:53 1 64 1 2025-11-20 17:47:09.499 00:05:51.581 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 17:48:28.994 00:05:00.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2348 1 2025-11-20 17:52:52.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35551 1 109 1 2025-11-20 17:52:52.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59124 1 80 1 2025-11-20 17:52:52.100 00:00:00.000 UDP 28.104.0.1:59124 -> 198.28.0.2:53 1 64 1 2025-11-20 17:52:52.100 00:00:00.000 UDP 28.104.0.1:35551 -> 198.28.0.2:53 1 64 1 2025-11-20 17:53:52.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57566 1 109 1 2025-11-20 17:53:52.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44796 1 80 1 2025-11-20 17:53:52.391 00:00:00.000 UDP 28.104.0.1:44796 -> 198.28.0.2:53 1 64 1 2025-11-20 17:53:52.391 00:00:00.000 UDP 28.104.0.1:57566 -> 198.28.0.2:53 1 64 1 2025-11-20 17:49:09.989 00:05:51.086 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 17:49:09.499 00:06:00.271 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 17:54:52.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39802 1 109 1 2025-11-20 17:54:52.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38134 1 80 1 2025-11-20 17:54:52.690 00:00:00.000 UDP 28.104.0.1:39802 -> 198.28.0.2:53 1 64 1 2025-11-20 17:54:52.689 00:00:00.000 UDP 28.104.0.1:38134 -> 198.28.0.2:53 1 64 1 2025-11-20 17:55:25.314 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 17:55:52.985 00:00:00.000 UDP 28.104.0.1:59515 -> 198.28.0.2:53 1 64 1 2025-11-20 17:55:52.985 00:00:00.000 UDP 28.104.0.1:56503 -> 198.28.0.2:53 1 64 1 2025-11-20 17:55:52.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59515 1 109 1 2025-11-20 17:55:52.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56503 1 80 1 2025-11-20 17:51:09.509 00:05:51.573 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 17:52:09.499 00:05:00.669 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 17:56:53.287 00:00:00.000 UDP 28.104.0.1:46029 -> 198.28.0.2:53 1 64 1 2025-11-20 17:56:53.288 00:00:00.000 UDP 28.104.0.1:49044 -> 198.28.0.2:53 1 64 1 2025-11-20 17:56:53.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49044 1 80 1 2025-11-20 17:56:53.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46029 1 109 1 2025-11-20 17:52:09.980 00:05:51.153 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 17:53:34.262 00:05:05.246 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 3000 1 2025-11-20 17:57:53.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39353 1 80 1 2025-11-20 17:57:53.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38860 1 109 1 2025-11-20 17:57:53.587 00:00:00.000 UDP 28.104.0.1:39353 -> 198.28.0.2:53 1 64 1 2025-11-20 17:57:53.586 00:00:00.000 UDP 28.104.0.1:38860 -> 198.28.0.2:53 1 64 1 2025-11-20 17:53:09.499 00:05:51.594 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 17:58:53.897 00:00:00.000 UDP 28.104.0.1:44522 -> 198.28.0.2:53 1 64 1 2025-11-20 17:58:53.897 00:00:00.000 UDP 28.104.0.1:53872 -> 198.28.0.2:53 1 64 1 2025-11-20 17:58:53.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44522 1 80 1 2025-11-20 17:58:53.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53872 1 109 1 Summary: total flows: 322, total bytes: 97188, total packets: 1426, avg bps: 202, avg pps: 0, avg bpp: 68 Time window: 2025-11-20 16:55:08 - 2025-11-20 17:59:01 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0036s User: 0.0045s Wall: 0.0038s flows/second: 85821.1 Runtime: 0.0038s