Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 02:59:19.047 00:00:00.000 UDP 28.104.0.1:52575 -> 198.28.0.2:53 1 64 1 2025-11-23 02:59:19.047 00:00:00.000 UDP 28.104.0.1:48361 -> 198.28.0.2:53 1 64 1 2025-11-23 02:59:19.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52575 1 80 1 2025-11-23 02:59:19.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48361 1 109 1 2025-11-23 03:00:19.345 00:00:00.000 UDP 28.104.0.1:34995 -> 198.28.0.2:53 1 64 1 2025-11-23 03:00:19.346 00:00:00.000 UDP 28.104.0.1:36313 -> 198.28.0.2:53 1 64 1 2025-11-23 03:00:19.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34995 1 109 1 2025-11-23 03:00:19.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36313 1 80 1 2025-11-23 03:01:19.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47679 1 109 1 2025-11-23 03:01:19.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43343 1 80 1 2025-11-23 03:01:19.646 00:00:00.000 UDP 28.104.0.1:47679 -> 198.28.0.2:53 1 64 1 2025-11-23 03:01:19.646 00:00:00.000 UDP 28.104.0.1:43343 -> 198.28.0.2:53 1 64 1 2025-11-23 03:01:33.952 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 02:57:10.721 00:05:51.692 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 02:58:02.461 00:05:08.661 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 02:57:10.710 00:06:00.226 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 02:58:10.710 00:05:00.601 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-23 03:02:19.944 00:00:00.000 UDP 28.104.0.1:59070 -> 198.28.0.2:53 1 64 1 2025-11-23 03:02:19.944 00:00:00.000 UDP 28.104.0.1:59963 -> 198.28.0.2:53 1 64 1 2025-11-23 03:02:19.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59963 1 109 1 2025-11-23 03:02:19.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59070 1 80 1 2025-11-23 02:58:33.532 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2692 1 2025-11-23 02:58:10.711 00:05:51.713 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 03:03:20.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36052 1 80 1 2025-11-23 03:03:20.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53675 1 109 1 2025-11-23 03:03:20.254 00:00:00.000 UDP 28.104.0.1:36052 -> 198.28.0.2:53 1 64 1 2025-11-23 03:03:20.254 00:00:00.000 UDP 28.104.0.1:53675 -> 198.28.0.2:53 1 64 1 2025-11-23 03:00:02.412 00:05:08.723 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 03:04:20.549 00:00:00.000 UDP 28.104.0.1:37917 -> 198.28.0.2:53 1 64 1 2025-11-23 03:04:20.549 00:00:00.000 UDP 28.104.0.1:56873 -> 198.28.0.2:53 1 64 1 2025-11-23 03:04:20.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56873 1 80 1 2025-11-23 03:04:20.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37917 1 109 1 2025-11-23 03:05:20.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52379 1 80 1 2025-11-23 03:05:20.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49526 1 109 1 2025-11-23 03:05:20.853 00:00:00.000 UDP 28.104.0.1:49526 -> 198.28.0.2:53 1 64 1 2025-11-23 03:05:20.853 00:00:00.000 UDP 28.104.0.1:52379 -> 198.28.0.2:53 1 64 1 2025-11-23 03:06:21.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41879 1 80 1 2025-11-23 03:06:21.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48845 1 109 1 2025-11-23 03:06:21.142 00:00:00.000 UDP 28.104.0.1:41879 -> 198.28.0.2:53 1 64 1 2025-11-23 03:06:21.142 00:00:00.000 UDP 28.104.0.1:48845 -> 198.28.0.2:53 1 64 1 2025-11-23 03:06:34.000 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:07:21.439 00:00:00.000 UDP 28.104.0.1:42941 -> 198.28.0.2:53 1 64 1 2025-11-23 03:07:21.439 00:00:00.000 UDP 28.104.0.1:53101 -> 198.28.0.2:53 1 64 1 2025-11-23 03:07:21.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53101 1 80 1 2025-11-23 03:07:21.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42941 1 109 1 2025-11-23 03:03:10.736 00:05:51.678 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 03:03:53.543 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2776 1 2025-11-23 03:04:10.727 00:05:00.586 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-23 03:04:02.463 00:05:08.662 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 03:08:21.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33721 1 109 1 2025-11-23 03:08:21.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43678 1 80 1 2025-11-23 03:08:21.733 00:00:00.000 UDP 28.104.0.1:33721 -> 198.28.0.2:53 1 64 1 2025-11-23 03:08:21.733 00:00:00.000 UDP 28.104.0.1:43678 -> 198.28.0.2:53 1 64 1 2025-11-23 03:04:10.727 00:05:51.697 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 03:04:10.727 00:06:00.211 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 03:09:22.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51517 1 80 1 2025-11-23 03:09:22.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48133 1 109 1 2025-11-23 03:09:22.063 00:00:00.000 UDP 28.104.0.1:51517 -> 198.28.0.2:53 1 64 1 2025-11-23 03:09:22.063 00:00:00.000 UDP 28.104.0.1:48133 -> 198.28.0.2:53 1 64 1 2025-11-23 03:06:02.414 00:05:08.722 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 03:10:22.372 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38522 1 80 1 2025-11-23 03:10:22.372 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60689 1 109 1 2025-11-23 03:10:22.362 00:00:00.000 UDP 28.104.0.1:38522 -> 198.28.0.2:53 1 64 1 2025-11-23 03:10:22.362 00:00:00.000 UDP 28.104.0.1:60689 -> 198.28.0.2:53 1 64 1 2025-11-23 03:11:22.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54389 1 80 1 2025-11-23 03:11:22.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56604 1 109 1 2025-11-23 03:11:22.659 00:00:00.000 UDP 28.104.0.1:54389 -> 198.28.0.2:53 1 64 1 2025-11-23 03:11:22.659 00:00:00.000 UDP 28.104.0.1:56604 -> 198.28.0.2:53 1 64 1 2025-11-23 03:11:34.277 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:12:22.956 00:00:00.000 UDP 28.104.0.1:40094 -> 198.28.0.2:53 1 64 1 2025-11-23 03:12:22.956 00:00:00.000 UDP 28.104.0.1:40166 -> 198.28.0.2:53 1 64 1 2025-11-23 03:12:22.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40166 1 80 1 2025-11-23 03:12:22.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40094 1 109 1 2025-11-23 03:13:23.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34875 1 80 1 2025-11-23 03:13:23.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51073 1 109 1 2025-11-23 03:13:23.250 00:00:00.000 UDP 28.104.0.1:34875 -> 198.28.0.2:53 1 64 1 2025-11-23 03:13:23.250 00:00:00.000 UDP 28.104.0.1:51073 -> 198.28.0.2:53 1 64 1 2025-11-23 03:09:13.554 00:05:10.026 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2964 1 2025-11-23 03:09:10.743 00:05:51.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 03:10:10.733 00:05:00.581 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-23 03:10:02.464 00:05:08.665 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 03:14:23.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45443 1 80 1 2025-11-23 03:14:23.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51870 1 109 1 2025-11-23 03:14:23.541 00:00:00.000 UDP 28.104.0.1:45443 -> 198.28.0.2:53 1 64 1 2025-11-23 03:14:23.541 00:00:00.000 UDP 28.104.0.1:51870 -> 198.28.0.2:53 1 64 1 2025-11-23 03:10:10.734 00:05:51.693 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 03:15:23.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41653 1 80 1 2025-11-23 03:15:23.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52086 1 109 1 2025-11-23 03:15:23.831 00:00:00.000 UDP 28.104.0.1:52086 -> 198.28.0.2:53 1 64 1 2025-11-23 03:15:23.831 00:00:00.000 UDP 28.104.0.1:41653 -> 198.28.0.2:53 1 64 1 2025-11-23 03:12:02.414 00:05:08.725 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 03:11:10.734 00:06:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 03:16:24.132 00:00:00.000 UDP 28.104.0.1:46865 -> 198.28.0.2:53 1 64 1 2025-11-23 03:16:24.133 00:00:00.000 UDP 28.104.0.1:48442 -> 198.28.0.2:53 1 64 1 2025-11-23 03:16:24.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46865 1 80 1 2025-11-23 03:16:24.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48442 1 109 1 2025-11-23 03:16:34.681 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:17:24.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42180 1 109 1 2025-11-23 03:17:24.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33073 1 80 1 2025-11-23 03:17:24.426 00:00:00.000 UDP 28.104.0.1:33073 -> 198.28.0.2:53 1 64 1 2025-11-23 03:17:24.426 00:00:00.000 UDP 28.104.0.1:42180 -> 198.28.0.2:53 1 64 1 2025-11-23 03:18:24.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50463 1 80 1 2025-11-23 03:18:24.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54139 1 109 1 2025-11-23 03:18:24.720 00:00:00.000 UDP 28.104.0.1:50463 -> 198.28.0.2:53 1 64 1 2025-11-23 03:18:24.720 00:00:00.000 UDP 28.104.0.1:54139 -> 198.28.0.2:53 1 64 1 2025-11-23 03:14:33.563 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-23 03:19:25.046 00:00:00.000 UDP 28.104.0.1:59676 -> 198.28.0.2:53 1 64 1 2025-11-23 03:19:25.046 00:00:00.000 UDP 28.104.0.1:46889 -> 198.28.0.2:53 1 64 1 2025-11-23 03:19:25.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46889 1 109 1 2025-11-23 03:19:25.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59676 1 80 1 2025-11-23 03:15:10.743 00:05:51.674 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 03:16:10.734 00:05:00.580 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-23 03:16:02.466 00:05:08.665 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 03:20:25.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45523 1 109 1 2025-11-23 03:20:25.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39705 1 80 1 2025-11-23 03:20:25.338 00:00:00.000 UDP 28.104.0.1:45523 -> 198.28.0.2:53 1 64 1 2025-11-23 03:20:25.338 00:00:00.000 UDP 28.104.0.1:39705 -> 198.28.0.2:53 1 64 1 2025-11-23 03:16:10.733 00:05:51.694 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 03:21:26.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49519 1 80 1 2025-11-23 03:21:26.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48682 1 109 1 2025-11-23 03:21:26.293 00:00:00.000 UDP 28.104.0.1:49519 -> 198.28.0.2:53 1 64 1 2025-11-23 03:21:26.293 00:00:00.000 UDP 28.104.0.1:48682 -> 198.28.0.2:53 1 64 1 2025-11-23 03:21:34.294 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:18:02.416 00:05:08.727 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 03:22:26.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55182 1 109 1 2025-11-23 03:22:26.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39459 1 80 1 2025-11-23 03:22:26.591 00:00:00.000 UDP 28.104.0.1:39459 -> 198.28.0.2:53 1 64 1 2025-11-23 03:22:26.591 00:00:00.000 UDP 28.104.0.1:55182 -> 198.28.0.2:53 1 64 1 2025-11-23 03:18:10.735 00:06:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 03:23:27.219 00:00:00.000 UDP 28.104.0.1:33937 -> 198.28.0.2:53 1 64 1 2025-11-23 03:23:27.219 00:00:00.000 UDP 28.104.0.1:48846 -> 198.28.0.2:53 1 64 1 2025-11-23 03:23:27.231 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48846 1 109 1 2025-11-23 03:23:27.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33937 1 80 1 2025-11-23 03:19:53.573 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-23 03:24:27.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60804 1 80 1 2025-11-23 03:24:27.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59735 1 109 1 2025-11-23 03:24:27.477 00:00:00.000 UDP 28.104.0.1:59735 -> 198.28.0.2:53 1 64 1 2025-11-23 03:24:27.477 00:00:00.000 UDP 28.104.0.1:60804 -> 198.28.0.2:53 1 64 1 2025-11-23 03:25:27.772 00:00:00.000 UDP 28.104.0.1:43209 -> 198.28.0.2:53 1 64 1 2025-11-23 03:25:27.772 00:00:00.000 UDP 28.104.0.1:52506 -> 198.28.0.2:53 1 64 1 2025-11-23 03:25:27.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52506 1 80 1 2025-11-23 03:25:27.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43209 1 109 1 2025-11-23 03:21:10.745 00:05:51.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 03:22:10.736 00:05:00.581 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-23 03:22:02.469 00:05:08.665 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 03:26:28.118 00:00:00.000 UDP 28.104.0.1:52016 -> 198.28.0.2:53 1 64 1 2025-11-23 03:26:28.118 00:00:00.000 UDP 28.104.0.1:34602 -> 198.28.0.2:53 1 64 1 2025-11-23 03:26:28.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52016 1 109 1 2025-11-23 03:26:28.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34602 1 80 1 2025-11-23 03:26:34.423 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:22:10.735 00:05:51.694 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 03:27:28.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51059 1 80 1 2025-11-23 03:27:28.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60143 1 109 1 2025-11-23 03:27:28.409 00:00:00.000 UDP 28.104.0.1:60143 -> 198.28.0.2:53 1 64 1 2025-11-23 03:27:28.409 00:00:00.000 UDP 28.104.0.1:51059 -> 198.28.0.2:53 1 64 1 2025-11-23 03:24:02.418 00:05:08.725 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 03:28:28.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35398 1 109 1 2025-11-23 03:28:28.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57727 1 80 1 2025-11-23 03:28:28.714 00:00:00.000 UDP 28.104.0.1:35398 -> 198.28.0.2:53 1 64 1 2025-11-23 03:28:28.714 00:00:00.000 UDP 28.104.0.1:57727 -> 198.28.0.2:53 1 64 1 2025-11-23 03:25:13.576 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2596 1 2025-11-23 03:29:29.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41857 1 109 1 2025-11-23 03:29:29.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39138 1 80 1 2025-11-23 03:29:29.058 00:00:00.000 UDP 28.104.0.1:41857 -> 198.28.0.2:53 1 64 1 2025-11-23 03:29:29.058 00:00:00.000 UDP 28.104.0.1:39138 -> 198.28.0.2:53 1 64 1 2025-11-23 03:25:10.736 00:06:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 03:30:29.353 00:00:00.000 UDP 28.104.0.1:53256 -> 198.28.0.2:53 1 64 1 2025-11-23 03:30:29.353 00:00:00.000 UDP 28.104.0.1:49809 -> 198.28.0.2:53 1 64 1 2025-11-23 03:30:29.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53256 1 109 1 2025-11-23 03:30:29.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49809 1 80 1 2025-11-23 03:31:29.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40050 1 109 1 2025-11-23 03:31:29.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51582 1 80 1 2025-11-23 03:31:29.659 00:00:00.000 UDP 28.104.0.1:51582 -> 198.28.0.2:53 1 64 1 2025-11-23 03:31:29.659 00:00:00.000 UDP 28.104.0.1:40050 -> 198.28.0.2:53 1 64 1 2025-11-23 03:31:34.960 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:27:10.751 00:05:51.669 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 03:28:10.735 00:05:00.582 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-23 03:28:02.469 00:05:08.665 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 03:32:29.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59985 1 109 1 2025-11-23 03:32:29.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48883 1 80 1 2025-11-23 03:32:29.961 00:00:00.000 UDP 28.104.0.1:48883 -> 198.28.0.2:53 1 64 1 2025-11-23 03:32:29.961 00:00:00.000 UDP 28.104.0.1:59985 -> 198.28.0.2:53 1 64 1 2025-11-23 03:28:10.736 00:05:51.695 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 03:33:30.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34494 1 109 1 2025-11-23 03:33:30.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53766 1 80 1 2025-11-23 03:33:30.323 00:00:00.000 UDP 28.104.0.1:34494 -> 198.28.0.2:53 1 64 1 2025-11-23 03:33:30.323 00:00:00.000 UDP 28.104.0.1:53766 -> 198.28.0.2:53 1 64 1 2025-11-23 03:30:02.419 00:05:08.727 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 03:34:30.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51318 1 80 1 2025-11-23 03:34:30.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35263 1 109 1 2025-11-23 03:34:30.617 00:00:00.000 UDP 28.104.0.1:51318 -> 198.28.0.2:53 1 64 1 2025-11-23 03:34:30.616 00:00:00.000 UDP 28.104.0.1:35263 -> 198.28.0.2:53 1 64 1 2025-11-23 03:30:33.580 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2696 1 2025-11-23 03:35:30.870 00:00:00.000 UDP 28.104.0.1:33179 -> 198.28.0.2:53 1 64 1 2025-11-23 03:35:30.870 00:00:00.000 UDP 28.104.0.1:34206 -> 198.28.0.2:53 1 64 1 2025-11-23 03:35:30.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33179 1 80 1 2025-11-23 03:35:30.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34206 1 109 1 2025-11-23 03:36:31.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51402 1 109 1 2025-11-23 03:36:31.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42176 1 80 1 2025-11-23 03:36:31.186 00:00:00.000 UDP 28.104.0.1:42176 -> 198.28.0.2:53 1 64 1 2025-11-23 03:36:31.186 00:00:00.000 UDP 28.104.0.1:51402 -> 198.28.0.2:53 1 64 1 2025-11-23 03:36:34.754 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:32:10.739 00:06:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 03:37:31.480 00:00:00.000 UDP 28.104.0.1:43685 -> 198.28.0.2:53 1 64 1 2025-11-23 03:37:31.480 00:00:00.000 UDP 28.104.0.1:55294 -> 198.28.0.2:53 1 64 1 2025-11-23 03:37:31.491 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55294 1 80 1 2025-11-23 03:37:31.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43685 1 109 1 2025-11-23 03:33:10.748 00:05:51.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 03:34:10.739 00:05:00.583 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-23 03:34:02.471 00:05:08.667 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 03:38:31.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34424 1 109 1 2025-11-23 03:38:31.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44837 1 80 1 2025-11-23 03:38:31.779 00:00:00.000 UDP 28.104.0.1:34424 -> 198.28.0.2:53 1 64 1 2025-11-23 03:38:31.779 00:00:00.000 UDP 28.104.0.1:44837 -> 198.28.0.2:53 1 64 1 2025-11-23 03:34:10.738 00:05:51.693 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 03:39:32.086 00:00:00.000 UDP 28.104.0.1:44695 -> 198.28.0.2:53 1 64 1 2025-11-23 03:39:32.086 00:00:00.000 UDP 28.104.0.1:58738 -> 198.28.0.2:53 1 64 1 2025-11-23 03:39:32.097 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58738 1 80 1 2025-11-23 03:39:32.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44695 1 109 1 2025-11-23 03:35:53.582 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 41 3100 1 2025-11-23 03:36:02.422 00:05:08.727 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 03:40:32.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47632 1 109 1 2025-11-23 03:40:32.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50412 1 80 1 2025-11-23 03:40:32.542 00:00:00.000 UDP 28.104.0.1:47632 -> 198.28.0.2:53 1 64 1 2025-11-23 03:40:32.542 00:00:00.000 UDP 28.104.0.1:50412 -> 198.28.0.2:53 1 64 1 2025-11-23 03:41:32.843 00:00:00.000 UDP 28.104.0.1:43093 -> 198.28.0.2:53 1 64 1 2025-11-23 03:41:32.843 00:00:00.000 UDP 28.104.0.1:52231 -> 198.28.0.2:53 1 64 1 2025-11-23 03:41:32.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43093 1 80 1 2025-11-23 03:41:32.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52231 1 109 1 2025-11-23 03:41:34.690 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:42:33.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38669 1 109 1 2025-11-23 03:42:33.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49692 1 80 1 2025-11-23 03:42:33.099 00:00:00.000 UDP 28.104.0.1:38669 -> 198.28.0.2:53 1 64 1 2025-11-23 03:42:33.099 00:00:00.000 UDP 28.104.0.1:49692 -> 198.28.0.2:53 1 64 1 2025-11-23 03:43:33.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39244 1 109 1 2025-11-23 03:43:33.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57113 1 80 1 2025-11-23 03:43:33.396 00:00:00.000 UDP 28.104.0.1:39244 -> 198.28.0.2:53 1 64 1 2025-11-23 03:43:33.396 00:00:00.000 UDP 28.104.0.1:57113 -> 198.28.0.2:53 1 64 1 2025-11-23 03:39:10.752 00:05:51.670 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 03:40:02.472 00:05:08.668 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 03:39:10.743 00:06:00.204 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 03:40:10.744 00:05:00.580 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-23 03:44:33.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44677 1 80 1 2025-11-23 03:44:33.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42903 1 109 1 2025-11-23 03:44:33.649 00:00:00.000 UDP 28.104.0.1:44677 -> 198.28.0.2:53 1 64 1 2025-11-23 03:44:33.649 00:00:00.000 UDP 28.104.0.1:42903 -> 198.28.0.2:53 1 64 1 2025-11-23 03:40:10.744 00:05:51.690 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 03:41:13.588 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-11-23 03:45:33.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49255 1 80 1 2025-11-23 03:45:33.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54649 1 109 1 2025-11-23 03:45:33.899 00:00:00.000 UDP 28.104.0.1:49255 -> 198.28.0.2:53 1 64 1 2025-11-23 03:45:33.899 00:00:00.000 UDP 28.104.0.1:54649 -> 198.28.0.2:53 1 64 1 2025-11-23 03:42:02.423 00:05:08.730 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 03:46:34.702 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:46:34.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48836 1 109 1 2025-11-23 03:46:34.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33694 1 80 1 2025-11-23 03:46:34.194 00:00:00.000 UDP 28.104.0.1:33694 -> 198.28.0.2:53 1 64 1 2025-11-23 03:46:34.194 00:00:00.000 UDP 28.104.0.1:48836 -> 198.28.0.2:53 1 64 1 2025-11-23 03:47:34.489 00:00:00.000 UDP 28.104.0.1:51137 -> 198.28.0.2:53 1 64 1 2025-11-23 03:47:34.490 00:00:00.000 UDP 28.104.0.1:33952 -> 198.28.0.2:53 1 64 1 2025-11-23 03:47:34.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51137 1 80 1 2025-11-23 03:47:34.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33952 1 109 1 2025-11-23 03:48:34.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42398 1 80 1 2025-11-23 03:48:34.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41275 1 109 1 2025-11-23 03:48:34.781 00:00:00.000 UDP 28.104.0.1:42398 -> 198.28.0.2:53 1 64 1 2025-11-23 03:48:34.781 00:00:00.000 UDP 28.104.0.1:41275 -> 198.28.0.2:53 1 64 1 2025-11-23 03:49:35.099 00:00:00.000 UDP 28.104.0.1:35432 -> 198.28.0.2:53 1 64 1 2025-11-23 03:49:35.099 00:00:00.000 UDP 28.104.0.1:42027 -> 198.28.0.2:53 1 64 1 2025-11-23 03:49:35.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35432 1 109 1 2025-11-23 03:49:35.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42027 1 80 1 2025-11-23 03:45:10.755 00:05:51.668 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 03:46:10.745 00:05:00.578 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-23 03:46:02.473 00:05:08.670 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 03:50:35.399 00:00:00.000 UDP 28.104.0.1:53268 -> 198.28.0.2:53 1 64 1 2025-11-23 03:50:35.399 00:00:00.000 UDP 28.104.0.1:60165 -> 198.28.0.2:53 1 64 1 2025-11-23 03:50:35.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53268 1 109 1 2025-11-23 03:50:35.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60165 1 80 1 2025-11-23 03:46:33.597 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-23 03:46:10.745 00:05:51.690 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 03:46:10.745 00:06:00.203 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 03:51:35.688 00:00:00.000 UDP 28.104.0.1:39861 -> 198.28.0.2:53 1 64 1 2025-11-23 03:51:35.688 00:00:00.000 UDP 28.104.0.1:34882 -> 198.28.0.2:53 1 64 1 2025-11-23 03:51:35.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34882 1 109 1 2025-11-23 03:51:35.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39861 1 80 1 2025-11-23 03:51:35.015 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:48:02.422 00:05:08.731 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 03:52:35.982 00:00:00.000 UDP 28.104.0.1:32831 -> 198.28.0.2:53 1 64 1 2025-11-23 03:52:35.982 00:00:00.000 UDP 28.104.0.1:59567 -> 198.28.0.2:53 1 64 1 2025-11-23 03:52:35.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32831 1 80 1 2025-11-23 03:52:35.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59567 1 109 1 2025-11-23 03:53:36.286 00:00:00.000 UDP 28.104.0.1:58938 -> 198.28.0.2:53 1 64 1 2025-11-23 03:53:36.285 00:00:00.000 UDP 28.104.0.1:42595 -> 198.28.0.2:53 1 64 1 2025-11-23 03:53:36.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42595 1 109 1 2025-11-23 03:53:36.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58938 1 80 1 2025-11-23 03:54:36.597 00:00:00.000 UDP 28.104.0.1:54171 -> 198.28.0.2:53 1 64 1 2025-11-23 03:54:36.597 00:00:00.000 UDP 28.104.0.1:50426 -> 198.28.0.2:53 1 64 1 2025-11-23 03:54:36.607 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50426 1 80 1 2025-11-23 03:54:36.607 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54171 1 109 1 2025-11-23 03:55:36.894 00:00:00.000 UDP 28.104.0.1:42034 -> 198.28.0.2:53 1 64 1 2025-11-23 03:55:36.894 00:00:00.000 UDP 28.104.0.1:36885 -> 198.28.0.2:53 1 64 1 2025-11-23 03:55:36.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42034 1 80 1 2025-11-23 03:55:36.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36885 1 109 1 2025-11-23 03:51:10.756 00:05:51.681 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 03:51:53.602 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-23 03:52:10.746 00:05:00.579 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-23 03:52:02.475 00:05:08.668 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 03:56:37.202 00:00:00.000 UDP 28.104.0.1:48483 -> 198.28.0.2:53 1 64 1 2025-11-23 03:56:37.202 00:00:00.000 UDP 28.104.0.1:59270 -> 198.28.0.2:53 1 64 1 2025-11-23 03:56:34.914 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 03:56:37.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59270 1 80 1 2025-11-23 03:56:37.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48483 1 109 1 2025-11-23 03:52:10.746 00:05:51.701 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 03:57:37.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45010 1 109 1 2025-11-23 03:57:37.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44775 1 80 1 2025-11-23 03:57:37.492 00:00:00.000 UDP 28.104.0.1:44775 -> 198.28.0.2:53 1 64 1 2025-11-23 03:57:37.492 00:00:00.000 UDP 28.104.0.1:45010 -> 198.28.0.2:53 1 64 1 2025-11-23 03:54:02.425 00:05:08.728 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 03:53:10.747 00:06:00.203 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 03:58:37.823 00:00:00.000 UDP 28.104.0.1:50031 -> 198.28.0.2:53 1 64 1 2025-11-23 03:58:37.823 00:00:00.000 UDP 28.104.0.1:56227 -> 198.28.0.2:53 1 64 1 2025-11-23 03:58:37.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50031 1 109 1 2025-11-23 03:58:37.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56227 1 80 1 Summary: total flows: 322, total bytes: 95021, total packets: 1400, avg bps: 204, avg pps: 0, avg bpp: 67 Time window: 2025-11-23 02:57:10 - 2025-11-23 03:59:11 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0049s User: 0.0030s Wall: 0.0037s flows/second: 87739.0 Runtime: 0.0037s