Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 17:59:03.937 00:00:00.000 UDP 28.104.0.1:55208 -> 198.28.0.2:53 1 64 1 2025-11-23 17:59:03.937 00:00:00.000 UDP 28.104.0.1:56524 -> 198.28.0.2:53 1 64 1 2025-11-23 17:59:03.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56524 1 80 1 2025-11-23 17:59:03.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55208 1 109 1 2025-11-23 18:00:04.239 00:00:00.000 UDP 28.104.0.1:42066 -> 198.28.0.2:53 1 64 1 2025-11-23 18:00:04.239 00:00:00.000 UDP 28.104.0.1:48776 -> 198.28.0.2:53 1 64 1 2025-11-23 18:00:04.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42066 1 109 1 2025-11-23 18:00:04.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48776 1 80 1 2025-11-23 18:01:04.532 00:00:00.000 UDP 28.104.0.1:42891 -> 198.28.0.2:53 1 64 1 2025-11-23 18:01:04.532 00:00:00.000 UDP 28.104.0.1:33046 -> 198.28.0.2:53 1 64 1 2025-11-23 18:01:04.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42891 1 80 1 2025-11-23 18:01:04.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33046 1 109 1 2025-11-23 17:57:02.697 00:05:08.522 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:56:11.206 00:06:00.424 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-23 17:56:11.206 00:06:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 18:01:52.057 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:02:04.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34862 1 109 1 2025-11-23 18:02:04.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41066 1 80 1 2025-11-23 18:02:04.814 00:00:00.000 UDP 28.104.0.1:41066 -> 198.28.0.2:53 1 64 1 2025-11-23 18:02:04.814 00:00:00.000 UDP 28.104.0.1:34862 -> 198.28.0.2:53 1 64 1 2025-11-23 17:58:02.748 00:05:08.664 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:58:11.206 00:05:51.502 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:03:05.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53155 1 109 1 2025-11-23 18:03:05.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45860 1 80 1 2025-11-23 18:03:05.112 00:00:00.000 UDP 28.104.0.1:53155 -> 198.28.0.2:53 1 64 1 2025-11-23 18:03:05.112 00:00:00.000 UDP 28.104.0.1:45860 -> 198.28.0.2:53 1 64 1 2025-11-23 17:59:14.711 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2580 1 2025-11-23 18:04:05.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36330 1 80 1 2025-11-23 18:04:05.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54068 1 109 1 2025-11-23 18:04:05.372 00:00:00.000 UDP 28.104.0.1:36330 -> 198.28.0.2:53 1 64 1 2025-11-23 18:04:05.373 00:00:00.000 UDP 28.104.0.1:54068 -> 198.28.0.2:53 1 64 1 2025-11-23 18:00:02.698 00:05:08.725 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:05:05.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38585 1 80 1 2025-11-23 18:05:05.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36375 1 109 1 2025-11-23 18:05:05.660 00:00:00.000 UDP 28.104.0.1:36375 -> 198.28.0.2:53 1 64 1 2025-11-23 18:05:05.660 00:00:00.000 UDP 28.104.0.1:38585 -> 198.28.0.2:53 1 64 1 2025-11-23 18:06:05.966 00:00:00.000 UDP 28.104.0.1:51908 -> 198.28.0.2:53 1 64 1 2025-11-23 18:06:05.966 00:00:00.000 UDP 28.104.0.1:50572 -> 198.28.0.2:53 1 64 1 2025-11-23 18:06:05.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50572 1 109 1 2025-11-23 18:06:05.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51908 1 80 1 2025-11-23 18:06:52.200 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:07:07.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40439 1 109 1 2025-11-23 18:07:07.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55819 1 80 1 2025-11-23 18:07:07.063 00:00:00.000 UDP 28.104.0.1:40439 -> 198.28.0.2:53 1 64 1 2025-11-23 18:07:07.063 00:00:00.000 UDP 28.104.0.1:55819 -> 198.28.0.2:53 1 64 1 2025-11-23 18:03:02.699 00:05:08.521 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 18:08:07.361 00:00:00.000 UDP 28.104.0.1:49207 -> 198.28.0.2:53 1 64 1 2025-11-23 18:08:07.361 00:00:00.000 UDP 28.104.0.1:57240 -> 198.28.0.2:53 1 64 1 2025-11-23 18:08:07.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49207 1 109 1 2025-11-23 18:08:07.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57240 1 80 1 2025-11-23 18:04:02.749 00:05:08.668 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 18:03:11.209 00:06:00.107 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 18:03:11.209 00:06:00.423 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-23 18:04:34.713 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2296 1 2025-11-23 18:04:11.209 00:05:51.502 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:09:07.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34117 1 80 1 2025-11-23 18:09:07.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49134 1 109 1 2025-11-23 18:09:07.659 00:00:00.000 UDP 28.104.0.1:34117 -> 198.28.0.2:53 1 64 1 2025-11-23 18:09:07.659 00:00:00.000 UDP 28.104.0.1:49134 -> 198.28.0.2:53 1 64 1 2025-11-23 18:10:07.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56297 1 80 1 2025-11-23 18:10:07.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60839 1 109 1 2025-11-23 18:10:07.954 00:00:00.000 UDP 28.104.0.1:60839 -> 198.28.0.2:53 1 64 1 2025-11-23 18:10:07.954 00:00:00.000 UDP 28.104.0.1:56297 -> 198.28.0.2:53 1 64 1 2025-11-23 18:06:02.698 00:05:08.729 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:11:08.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55130 1 80 1 2025-11-23 18:11:08.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53931 1 109 1 2025-11-23 18:11:08.252 00:00:00.000 UDP 28.104.0.1:55130 -> 198.28.0.2:53 1 64 1 2025-11-23 18:11:08.252 00:00:00.000 UDP 28.104.0.1:53931 -> 198.28.0.2:53 1 64 1 2025-11-23 18:11:52.189 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:12:08.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56733 1 109 1 2025-11-23 18:12:08.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44698 1 80 1 2025-11-23 18:12:08.553 00:00:00.000 UDP 28.104.0.1:56733 -> 198.28.0.2:53 1 64 1 2025-11-23 18:12:08.554 00:00:00.000 UDP 28.104.0.1:44698 -> 198.28.0.2:53 1 64 1 2025-11-23 18:13:08.851 00:00:00.000 UDP 28.104.0.1:37227 -> 198.28.0.2:53 1 64 1 2025-11-23 18:13:08.851 00:00:00.000 UDP 28.104.0.1:33331 -> 198.28.0.2:53 1 64 1 2025-11-23 18:13:08.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33331 1 80 1 2025-11-23 18:13:08.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37227 1 109 1 2025-11-23 18:09:02.700 00:05:08.522 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 18:09:54.721 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-23 18:10:02.751 00:05:08.667 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 18:14:09.166 00:00:00.000 UDP 28.104.0.1:37715 -> 198.28.0.2:53 1 64 1 2025-11-23 18:14:09.166 00:00:00.000 UDP 28.104.0.1:58121 -> 198.28.0.2:53 1 64 1 2025-11-23 18:14:09.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58121 1 80 1 2025-11-23 18:14:09.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37715 1 109 1 2025-11-23 18:10:11.210 00:05:51.505 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:15:09.467 00:00:00.000 UDP 28.104.0.1:48930 -> 198.28.0.2:53 1 64 1 2025-11-23 18:10:11.210 00:06:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 18:15:09.467 00:00:00.000 UDP 28.104.0.1:45451 -> 198.28.0.2:53 1 64 1 2025-11-23 18:10:11.210 00:06:00.425 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-23 18:15:09.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48930 1 109 1 2025-11-23 18:15:09.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45451 1 80 1 2025-11-23 18:16:09.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51935 1 80 1 2025-11-23 18:12:02.700 00:05:08.728 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:16:09.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45080 1 109 1 2025-11-23 18:16:09.769 00:00:00.000 UDP 28.104.0.1:51935 -> 198.28.0.2:53 1 64 1 2025-11-23 18:16:09.770 00:00:00.000 UDP 28.104.0.1:45080 -> 198.28.0.2:53 1 64 1 2025-11-23 18:16:52.025 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:17:10.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50785 1 80 1 2025-11-23 18:17:10.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34167 1 109 1 2025-11-23 18:17:10.077 00:00:00.000 UDP 28.104.0.1:34167 -> 198.28.0.2:53 1 64 1 2025-11-23 18:17:10.077 00:00:00.000 UDP 28.104.0.1:50785 -> 198.28.0.2:53 1 64 1 2025-11-23 18:18:10.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50367 1 109 1 2025-11-23 18:18:10.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49272 1 80 1 2025-11-23 18:18:10.383 00:00:00.000 UDP 28.104.0.1:49272 -> 198.28.0.2:53 1 64 1 2025-11-23 18:18:10.383 00:00:00.000 UDP 28.104.0.1:50367 -> 198.28.0.2:53 1 64 1 2025-11-23 18:19:10.680 00:00:00.000 UDP 28.104.0.1:50445 -> 198.28.0.2:53 1 64 1 2025-11-23 18:19:10.681 00:00:00.000 UDP 28.104.0.1:54215 -> 198.28.0.2:53 1 64 1 2025-11-23 18:19:10.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54215 1 109 1 2025-11-23 18:15:02.702 00:05:08.521 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 18:19:10.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50445 1 80 1 2025-11-23 18:15:14.728 00:05:10.018 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2852 1 2025-11-23 18:20:11.329 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52685 1 109 1 2025-11-23 18:20:11.329 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33374 1 80 1 2025-11-23 18:16:02.755 00:05:08.668 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 18:20:11.320 00:00:00.000 UDP 28.104.0.1:52685 -> 198.28.0.2:53 1 64 1 2025-11-23 18:20:11.320 00:00:00.000 UDP 28.104.0.1:33374 -> 198.28.0.2:53 1 64 1 2025-11-23 18:16:11.213 00:05:51.500 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:21:11.615 00:00:00.000 UDP 28.104.0.1:53623 -> 198.28.0.2:53 1 64 1 2025-11-23 18:21:11.615 00:00:00.000 UDP 28.104.0.1:41630 -> 198.28.0.2:53 1 64 1 2025-11-23 18:21:11.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41630 1 80 1 2025-11-23 18:21:11.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53623 1 109 1 2025-11-23 18:21:52.277 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:22:11.863 00:00:00.000 UDP 28.104.0.1:36539 -> 198.28.0.2:53 1 64 1 2025-11-23 18:17:11.213 00:06:00.426 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-23 18:22:11.863 00:00:00.000 UDP 28.104.0.1:40543 -> 198.28.0.2:53 1 64 1 2025-11-23 18:17:11.213 00:06:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 18:22:11.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36539 1 80 1 2025-11-23 18:18:02.703 00:05:08.730 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:22:11.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40543 1 109 1 2025-11-23 18:23:12.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42597 1 109 1 2025-11-23 18:23:12.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51978 1 80 1 2025-11-23 18:23:12.186 00:00:00.000 UDP 28.104.0.1:51978 -> 198.28.0.2:53 1 64 1 2025-11-23 18:23:12.186 00:00:00.000 UDP 28.104.0.1:42597 -> 198.28.0.2:53 1 64 1 2025-11-23 18:24:12.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43783 1 109 1 2025-11-23 18:24:12.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47717 1 80 1 2025-11-23 18:24:12.500 00:00:00.000 UDP 28.104.0.1:43783 -> 198.28.0.2:53 1 64 1 2025-11-23 18:24:12.500 00:00:00.000 UDP 28.104.0.1:47717 -> 198.28.0.2:53 1 64 1 2025-11-23 18:20:34.747 00:05:10.016 OSPF 28.0.2.2:0 -> 224.0.0.5:0 42 3048 1 2025-11-23 18:25:12.807 00:00:00.000 UDP 28.104.0.1:57534 -> 198.28.0.2:53 1 64 1 2025-11-23 18:25:12.807 00:00:00.000 UDP 28.104.0.1:42664 -> 198.28.0.2:53 1 64 1 2025-11-23 18:21:02.703 00:05:08.522 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 18:25:12.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42664 1 109 1 2025-11-23 18:25:12.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57534 1 80 1 2025-11-23 18:26:13.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55455 1 80 1 2025-11-23 18:26:13.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51368 1 109 1 2025-11-23 18:26:13.116 00:00:00.000 UDP 28.104.0.1:51368 -> 198.28.0.2:53 1 64 1 2025-11-23 18:22:02.754 00:05:08.670 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 18:26:13.116 00:00:00.000 UDP 28.104.0.1:55455 -> 198.28.0.2:53 1 64 1 2025-11-23 18:26:52.531 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:22:11.214 00:05:51.501 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:27:13.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43730 1 109 1 2025-11-23 18:27:13.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46357 1 80 1 2025-11-23 18:27:13.409 00:00:00.000 UDP 28.104.0.1:46357 -> 198.28.0.2:53 1 64 1 2025-11-23 18:27:13.410 00:00:00.000 UDP 28.104.0.1:43730 -> 198.28.0.2:53 1 64 1 2025-11-23 18:24:02.705 00:05:08.730 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:28:13.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33726 1 109 1 2025-11-23 18:28:13.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47452 1 80 1 2025-11-23 18:28:13.705 00:00:00.000 UDP 28.104.0.1:47452 -> 198.28.0.2:53 1 64 1 2025-11-23 18:28:13.705 00:00:00.000 UDP 28.104.0.1:33726 -> 198.28.0.2:53 1 64 1 2025-11-23 18:24:11.215 00:06:00.423 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-23 18:29:13.994 00:00:00.000 UDP 28.104.0.1:35738 -> 198.28.0.2:53 1 64 1 2025-11-23 18:29:13.994 00:00:00.000 UDP 28.104.0.1:42057 -> 198.28.0.2:53 1 64 1 2025-11-23 18:24:11.215 00:06:00.108 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 18:29:14.005 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35738 1 80 1 2025-11-23 18:29:14.005 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42057 1 109 1 2025-11-23 18:25:54.763 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2500 1 2025-11-23 18:30:14.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58038 1 109 1 2025-11-23 18:30:14.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55138 1 80 1 2025-11-23 18:30:14.265 00:00:00.000 UDP 28.104.0.1:55138 -> 198.28.0.2:53 1 64 1 2025-11-23 18:30:14.264 00:00:00.000 UDP 28.104.0.1:58038 -> 198.28.0.2:53 1 64 1 2025-11-23 18:31:14.521 00:00:00.000 UDP 28.104.0.1:33160 -> 198.28.0.2:53 1 64 1 2025-11-23 18:31:14.521 00:00:00.000 UDP 28.104.0.1:37158 -> 198.28.0.2:53 1 64 1 2025-11-23 18:27:02.704 00:05:08.522 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 18:31:14.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33160 1 80 1 2025-11-23 18:31:14.531 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37158 1 109 1 2025-11-23 18:31:52.572 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:28:02.756 00:05:08.670 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 18:32:14.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33491 1 80 1 2025-11-23 18:32:14.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59738 1 109 1 2025-11-23 18:32:14.819 00:00:00.000 UDP 28.104.0.1:33491 -> 198.28.0.2:53 1 64 1 2025-11-23 18:32:14.819 00:00:00.000 UDP 28.104.0.1:59738 -> 198.28.0.2:53 1 64 1 2025-11-23 18:28:11.217 00:05:51.500 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:33:15.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38388 1 80 1 2025-11-23 18:33:15.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49338 1 109 1 2025-11-23 18:33:15.117 00:00:00.000 UDP 28.104.0.1:38388 -> 198.28.0.2:53 1 64 1 2025-11-23 18:33:15.117 00:00:00.000 UDP 28.104.0.1:49338 -> 198.28.0.2:53 1 64 1 2025-11-23 18:30:02.706 00:05:08.730 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:34:15.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46158 1 109 1 2025-11-23 18:34:15.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34957 1 80 1 2025-11-23 18:34:15.410 00:00:00.000 UDP 28.104.0.1:34957 -> 198.28.0.2:53 1 64 1 2025-11-23 18:34:15.410 00:00:00.000 UDP 28.104.0.1:46158 -> 198.28.0.2:53 1 64 1 2025-11-23 18:35:15.703 00:00:00.000 UDP 28.104.0.1:57193 -> 198.28.0.2:53 1 64 1 2025-11-23 18:35:15.703 00:00:00.000 UDP 28.104.0.1:35045 -> 198.28.0.2:53 1 64 1 2025-11-23 18:35:15.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35045 1 80 1 2025-11-23 18:35:15.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57193 1 109 1 2025-11-23 18:31:14.768 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-23 18:31:11.217 00:06:00.423 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-23 18:31:11.216 00:06:00.107 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 18:36:15.957 00:00:00.000 UDP 28.104.0.1:56444 -> 198.28.0.2:53 1 64 1 2025-11-23 18:36:15.957 00:00:00.000 UDP 28.104.0.1:33692 -> 198.28.0.2:53 1 64 1 2025-11-23 18:36:15.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56444 1 80 1 2025-11-23 18:36:15.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33692 1 109 1 2025-11-23 18:36:52.681 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:33:02.706 00:05:08.522 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 18:37:16.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43864 1 109 1 2025-11-23 18:37:16.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56380 1 80 1 2025-11-23 18:37:16.259 00:00:00.000 UDP 28.104.0.1:56380 -> 198.28.0.2:53 1 64 1 2025-11-23 18:37:16.259 00:00:00.000 UDP 28.104.0.1:43864 -> 198.28.0.2:53 1 64 1 2025-11-23 18:34:02.757 00:05:08.670 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 18:38:16.851 00:00:00.000 UDP 28.104.0.1:52547 -> 198.28.0.2:53 1 64 1 2025-11-23 18:38:16.851 00:00:00.000 UDP 28.104.0.1:48782 -> 198.28.0.2:53 1 64 1 2025-11-23 18:38:16.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52547 1 80 1 2025-11-23 18:38:16.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48782 1 109 1 2025-11-23 18:34:11.219 00:05:51.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:39:17.168 00:00:00.000 UDP 28.104.0.1:52931 -> 198.28.0.2:53 1 64 1 2025-11-23 18:39:17.168 00:00:00.000 UDP 28.104.0.1:52969 -> 198.28.0.2:53 1 64 1 2025-11-23 18:39:17.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52969 1 80 1 2025-11-23 18:39:17.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52931 1 109 1 2025-11-23 18:36:02.707 00:05:08.730 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:40:17.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46326 1 80 1 2025-11-23 18:40:17.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44298 1 109 1 2025-11-23 18:40:17.433 00:00:00.000 UDP 28.104.0.1:44298 -> 198.28.0.2:53 1 64 1 2025-11-23 18:40:17.433 00:00:00.000 UDP 28.104.0.1:46326 -> 198.28.0.2:53 1 64 1 2025-11-23 18:36:34.776 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-23 18:41:17.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33829 1 80 1 2025-11-23 18:41:17.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53694 1 109 1 2025-11-23 18:41:17.724 00:00:00.000 UDP 28.104.0.1:53694 -> 198.28.0.2:53 1 64 1 2025-11-23 18:41:17.724 00:00:00.000 UDP 28.104.0.1:33829 -> 198.28.0.2:53 1 64 1 2025-11-23 18:41:52.934 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:42:18.054 00:00:00.000 UDP 28.104.0.1:34630 -> 198.28.0.2:53 1 64 1 2025-11-23 18:42:18.054 00:00:00.000 UDP 28.104.0.1:60021 -> 198.28.0.2:53 1 64 1 2025-11-23 18:42:18.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34630 1 80 1 2025-11-23 18:42:18.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60021 1 109 1 2025-11-23 18:39:02.707 00:05:08.522 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 18:38:11.219 00:06:00.422 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-23 18:38:11.218 00:06:00.107 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 18:43:18.349 00:00:00.000 UDP 28.104.0.1:49882 -> 198.28.0.2:53 1 64 1 2025-11-23 18:43:18.349 00:00:00.000 UDP 28.104.0.1:46624 -> 198.28.0.2:53 1 64 1 2025-11-23 18:43:18.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46624 1 80 1 2025-11-23 18:43:18.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49882 1 109 1 2025-11-23 18:40:02.757 00:05:08.680 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 18:44:18.642 00:00:00.000 UDP 28.104.0.1:33871 -> 198.28.0.2:53 1 64 1 2025-11-23 18:44:18.642 00:00:00.000 UDP 28.104.0.1:37067 -> 198.28.0.2:53 1 64 1 2025-11-23 18:44:18.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37067 1 80 1 2025-11-23 18:44:18.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33871 1 109 1 2025-11-23 18:40:11.219 00:05:51.500 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:45:18.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39311 1 109 1 2025-11-23 18:45:18.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59178 1 80 1 2025-11-23 18:45:18.950 00:00:00.000 UDP 28.104.0.1:39311 -> 198.28.0.2:53 1 64 1 2025-11-23 18:45:18.950 00:00:00.000 UDP 28.104.0.1:59178 -> 198.28.0.2:53 1 64 1 2025-11-23 18:41:54.783 00:05:10.037 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2756 1 2025-11-23 18:42:02.708 00:05:08.739 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:46:19.248 00:00:00.000 UDP 28.104.0.1:54279 -> 198.28.0.2:53 1 64 1 2025-11-23 18:46:19.248 00:00:00.000 UDP 28.104.0.1:41274 -> 198.28.0.2:53 1 64 1 2025-11-23 18:46:19.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54279 1 109 1 2025-11-23 18:46:19.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41274 1 80 1 2025-11-23 18:46:53.045 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:47:19.544 00:00:00.000 UDP 28.104.0.1:57978 -> 198.28.0.2:53 1 64 1 2025-11-23 18:47:19.544 00:00:00.000 UDP 28.104.0.1:34005 -> 198.28.0.2:53 1 64 1 2025-11-23 18:47:19.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34005 1 109 1 2025-11-23 18:47:19.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57978 1 80 1 2025-11-23 18:48:19.832 00:00:00.000 UDP 28.104.0.1:47508 -> 198.28.0.2:53 1 64 1 2025-11-23 18:48:19.831 00:00:00.000 UDP 28.104.0.1:54928 -> 198.28.0.2:53 1 64 1 2025-11-23 18:48:19.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54928 1 109 1 2025-11-23 18:48:19.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47508 1 80 1 2025-11-23 18:45:02.709 00:05:08.528 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 18:49:20.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43441 1 80 1 2025-11-23 18:49:20.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51629 1 109 1 2025-11-23 18:49:20.121 00:00:00.000 UDP 28.104.0.1:43441 -> 198.28.0.2:53 1 64 1 2025-11-23 18:49:20.121 00:00:00.000 UDP 28.104.0.1:51629 -> 198.28.0.2:53 1 64 1 2025-11-23 18:45:11.221 00:06:00.422 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-23 18:46:02.759 00:05:08.679 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 18:45:11.221 00:06:00.108 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 18:50:20.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39259 1 80 1 2025-11-23 18:50:20.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39829 1 109 1 2025-11-23 18:50:20.405 00:00:00.000 UDP 28.104.0.1:39259 -> 198.28.0.2:53 1 64 1 2025-11-23 18:50:20.405 00:00:00.000 UDP 28.104.0.1:39829 -> 198.28.0.2:53 1 64 1 2025-11-23 18:46:11.220 00:05:51.505 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:51:20.747 00:00:00.000 UDP 28.104.0.1:56210 -> 198.28.0.2:53 1 64 1 2025-11-23 18:51:20.747 00:00:00.000 UDP 28.104.0.1:35494 -> 198.28.0.2:53 1 64 1 2025-11-23 18:51:20.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56210 1 109 1 2025-11-23 18:51:20.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35494 1 80 1 2025-11-23 18:47:14.790 00:05:10.049 OSPF 28.0.2.2:0 -> 224.0.0.5:0 41 3040 1 2025-11-23 18:51:53.374 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:48:02.717 00:05:08.734 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:52:21.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34561 1 80 1 2025-11-23 18:52:21.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35349 1 109 1 2025-11-23 18:52:21.073 00:00:00.000 UDP 28.104.0.1:34561 -> 198.28.0.2:53 1 64 1 2025-11-23 18:52:21.073 00:00:00.000 UDP 28.104.0.1:35349 -> 198.28.0.2:53 1 64 1 2025-11-23 18:53:21.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32916 1 80 1 2025-11-23 18:53:21.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59101 1 109 1 2025-11-23 18:53:21.381 00:00:00.000 UDP 28.104.0.1:32916 -> 198.28.0.2:53 1 64 1 2025-11-23 18:53:21.381 00:00:00.000 UDP 28.104.0.1:59101 -> 198.28.0.2:53 1 64 1 2025-11-23 18:54:21.694 00:00:00.000 UDP 28.104.0.1:45724 -> 198.28.0.2:53 1 64 1 2025-11-23 18:54:21.694 00:00:00.000 UDP 28.104.0.1:44322 -> 198.28.0.2:53 1 64 1 2025-11-23 18:54:21.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44322 1 109 1 2025-11-23 18:54:21.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45724 1 80 1 2025-11-23 18:51:02.716 00:05:08.522 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 18:55:21.953 00:00:00.000 UDP 28.104.0.1:40092 -> 198.28.0.2:53 1 64 1 2025-11-23 18:55:21.953 00:00:00.000 UDP 28.104.0.1:39333 -> 198.28.0.2:53 1 64 1 2025-11-23 18:55:21.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40092 1 80 1 2025-11-23 18:55:21.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39333 1 109 1 2025-11-23 18:52:02.766 00:05:08.673 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 18:56:22.263 00:00:00.000 UDP 28.104.0.1:33142 -> 198.28.0.2:53 1 64 1 2025-11-23 18:56:22.263 00:00:00.000 UDP 28.104.0.1:43753 -> 198.28.0.2:53 1 64 1 2025-11-23 18:56:22.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33142 1 109 1 2025-11-23 18:56:22.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43753 1 80 1 2025-11-23 18:52:34.800 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2596 1 2025-11-23 18:56:53.142 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:52:11.228 00:05:51.500 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:52:11.229 00:06:00.416 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-23 18:52:11.229 00:06:00.105 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-23 18:57:22.558 00:00:00.000 UDP 28.104.0.1:34736 -> 198.28.0.2:53 1 64 1 2025-11-23 18:57:22.558 00:00:00.000 UDP 28.104.0.1:45578 -> 198.28.0.2:53 1 64 1 2025-11-23 18:57:22.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45578 1 80 1 2025-11-23 18:57:22.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34736 1 109 1 2025-11-23 18:54:02.718 00:05:08.733 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:58:22.848 00:00:00.000 UDP 28.104.0.1:35023 -> 198.28.0.2:53 1 64 1 2025-11-23 18:58:22.847 00:00:00.000 UDP 28.104.0.1:49657 -> 198.28.0.2:53 1 64 1 2025-11-23 18:58:22.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35023 1 80 1 2025-11-23 18:58:22.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49657 1 109 1 Summary: total flows: 321, total bytes: 95522, total packets: 1407, avg bps: 202, avg pps: 0, avg bpp: 67 Time window: 2025-11-23 17:56:11 - 2025-11-23 18:59:11 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0040s User: 0.0030s Wall: 0.0027s flows/second: 118279.2 Runtime: 0.0027s