Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 04:58:56.910 00:00:00.000 UDP 28.104.0.1:60185 -> 198.28.0.2:53 1 64 1 2025-11-24 04:58:56.910 00:00:00.000 UDP 28.104.0.1:57734 -> 198.28.0.2:53 1 64 1 2025-11-24 04:58:56.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60185 1 80 1 2025-11-24 04:58:56.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57734 1 109 1 2025-11-24 04:54:11.442 00:06:00.394 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 04:54:11.442 00:06:00.082 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 04:59:57.221 00:00:00.000 UDP 28.104.0.1:51132 -> 198.28.0.2:53 1 64 1 2025-11-24 04:59:57.221 00:00:00.000 UDP 28.104.0.1:34774 -> 198.28.0.2:53 1 64 1 2025-11-24 04:59:57.234 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34774 1 80 1 2025-11-24 04:59:57.232 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51132 1 109 1 2025-11-24 05:00:57.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34239 1 80 1 2025-11-24 05:00:57.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35781 1 109 1 2025-11-24 05:00:57.524 00:00:00.000 UDP 28.104.0.1:34239 -> 198.28.0.2:53 1 64 1 2025-11-24 05:00:57.524 00:00:00.000 UDP 28.104.0.1:35781 -> 198.28.0.2:53 1 64 1 2025-11-24 04:57:02.899 00:05:08.555 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 05:01:57.818 00:00:00.000 UDP 28.104.0.1:57530 -> 198.28.0.2:53 1 64 1 2025-11-24 05:01:57.818 00:00:00.000 UDP 28.104.0.1:37920 -> 198.28.0.2:53 1 64 1 2025-11-24 05:01:57.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57530 1 80 1 2025-11-24 05:01:57.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37920 1 109 1 2025-11-24 05:02:05.672 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 04:58:02.949 00:05:08.679 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:02:58.463 00:00:00.000 UDP 28.104.0.1:59179 -> 198.28.0.2:53 1 64 1 2025-11-24 05:02:58.463 00:00:00.000 UDP 28.104.0.1:37661 -> 198.28.0.2:53 1 64 1 2025-11-24 05:02:58.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59179 1 80 1 2025-11-24 05:02:58.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37661 1 109 1 2025-11-24 04:58:11.442 00:05:51.468 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 04:59:35.631 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2520 1 2025-11-24 05:03:58.768 00:00:00.000 UDP 28.104.0.1:51150 -> 198.28.0.2:53 1 64 1 2025-11-24 05:03:58.768 00:00:00.000 UDP 28.104.0.1:46580 -> 198.28.0.2:53 1 64 1 2025-11-24 05:03:58.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46580 1 80 1 2025-11-24 05:03:58.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51150 1 109 1 2025-11-24 05:00:02.900 00:05:08.739 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 05:04:59.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46583 1 80 1 2025-11-24 05:04:59.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54464 1 109 1 2025-11-24 05:04:59.077 00:00:00.000 UDP 28.104.0.1:54464 -> 198.28.0.2:53 1 64 1 2025-11-24 05:04:59.077 00:00:00.000 UDP 28.104.0.1:46583 -> 198.28.0.2:53 1 64 1 2025-11-24 05:05:59.383 00:00:00.000 UDP 28.104.0.1:49558 -> 198.28.0.2:53 1 64 1 2025-11-24 05:05:59.383 00:00:00.000 UDP 28.104.0.1:54613 -> 198.28.0.2:53 1 64 1 2025-11-24 05:05:59.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54613 1 109 1 2025-11-24 05:05:59.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49558 1 80 1 2025-11-24 05:01:11.444 00:06:00.395 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 05:01:11.444 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 05:07:04.204 00:00:00.000 UDP 28.104.0.1:41685 -> 198.28.0.2:53 1 64 1 2025-11-24 05:07:04.204 00:00:00.000 UDP 28.104.0.1:38730 -> 198.28.0.2:53 1 64 1 2025-11-24 05:07:05.321 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:07:04.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41685 1 80 1 2025-11-24 05:07:04.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38730 1 109 1 2025-11-24 05:03:02.900 00:05:08.554 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 05:08:04.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33684 1 80 1 2025-11-24 05:08:04.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59491 1 109 1 2025-11-24 05:08:04.494 00:00:00.000 UDP 28.104.0.1:59491 -> 198.28.0.2:53 1 64 1 2025-11-24 05:08:04.494 00:00:00.000 UDP 28.104.0.1:33684 -> 198.28.0.2:53 1 64 1 2025-11-24 05:04:02.951 00:05:08.679 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:04:11.443 00:05:51.470 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 05:09:05.576 00:00:00.000 UDP 28.104.0.1:45041 -> 198.28.0.2:53 1 64 1 2025-11-24 05:04:55.632 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-24 05:09:05.576 00:00:00.000 UDP 28.104.0.1:47713 -> 198.28.0.2:53 1 64 1 2025-11-24 05:09:05.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45041 1 109 1 2025-11-24 05:09:05.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47713 1 80 1 2025-11-24 05:10:05.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39321 1 109 1 2025-11-24 05:10:05.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42753 1 80 1 2025-11-24 05:10:05.882 00:00:00.000 UDP 28.104.0.1:42753 -> 198.28.0.2:53 1 64 1 2025-11-24 05:10:05.882 00:00:00.000 UDP 28.104.0.1:39321 -> 198.28.0.2:53 1 64 1 2025-11-24 05:06:02.903 00:05:08.743 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 05:11:06.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33210 1 109 1 2025-11-24 05:11:06.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42050 1 80 1 2025-11-24 05:11:06.184 00:00:00.000 UDP 28.104.0.1:42050 -> 198.28.0.2:53 1 64 1 2025-11-24 05:11:06.184 00:00:00.000 UDP 28.104.0.1:33210 -> 198.28.0.2:53 1 64 1 2025-11-24 05:12:06.489 00:00:00.000 UDP 28.104.0.1:55273 -> 198.28.0.2:53 1 64 1 2025-11-24 05:12:06.489 00:00:00.000 UDP 28.104.0.1:50648 -> 198.28.0.2:53 1 64 1 2025-11-24 05:12:05.344 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:12:06.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50648 1 80 1 2025-11-24 05:12:06.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55273 1 109 1 2025-11-24 05:13:06.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53392 1 109 1 2025-11-24 05:13:06.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45311 1 80 1 2025-11-24 05:09:02.903 00:05:08.556 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 05:13:06.781 00:00:00.000 UDP 28.104.0.1:53392 -> 198.28.0.2:53 1 64 1 2025-11-24 05:13:06.782 00:00:00.000 UDP 28.104.0.1:45311 -> 198.28.0.2:53 1 64 1 2025-11-24 05:08:11.444 00:06:00.395 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 05:08:11.444 00:06:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 05:14:07.079 00:00:00.000 UDP 28.104.0.1:44293 -> 198.28.0.2:53 1 64 1 2025-11-24 05:14:07.079 00:00:00.000 UDP 28.104.0.1:39613 -> 198.28.0.2:53 1 64 1 2025-11-24 05:14:07.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44293 1 80 1 2025-11-24 05:14:07.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39613 1 109 1 2025-11-24 05:10:02.954 00:05:08.682 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:10:15.639 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2676 1 2025-11-24 05:10:11.449 00:05:51.466 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 05:15:07.373 00:00:00.000 UDP 28.104.0.1:48946 -> 198.28.0.2:53 1 64 1 2025-11-24 05:15:07.373 00:00:00.000 UDP 28.104.0.1:55427 -> 198.28.0.2:53 1 64 1 2025-11-24 05:15:07.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55427 1 80 1 2025-11-24 05:15:07.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48946 1 109 1 2025-11-24 05:16:07.662 00:00:00.000 UDP 28.104.0.1:42507 -> 198.28.0.2:53 1 64 1 2025-11-24 05:16:07.662 00:00:00.000 UDP 28.104.0.1:49272 -> 198.28.0.2:53 1 64 1 2025-11-24 05:16:07.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42507 1 109 1 2025-11-24 05:16:07.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49272 1 80 1 2025-11-24 05:12:02.904 00:05:08.740 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 05:17:05.449 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:17:07.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34941 1 80 1 2025-11-24 05:17:07.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47542 1 109 1 2025-11-24 05:17:07.962 00:00:00.000 UDP 28.104.0.1:47542 -> 198.28.0.2:53 1 64 1 2025-11-24 05:17:07.962 00:00:00.000 UDP 28.104.0.1:34941 -> 198.28.0.2:53 1 64 1 2025-11-24 05:18:08.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33157 1 109 1 2025-11-24 05:18:08.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38042 1 80 1 2025-11-24 05:18:08.258 00:00:00.000 UDP 28.104.0.1:38042 -> 198.28.0.2:53 1 64 1 2025-11-24 05:18:08.258 00:00:00.000 UDP 28.104.0.1:33157 -> 198.28.0.2:53 1 64 1 2025-11-24 05:19:08.561 00:00:00.000 UDP 28.104.0.1:58725 -> 198.28.0.2:53 1 64 1 2025-11-24 05:19:08.561 00:00:00.000 UDP 28.104.0.1:35535 -> 198.28.0.2:53 1 64 1 2025-11-24 05:19:08.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58725 1 109 1 2025-11-24 05:19:08.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35535 1 80 1 2025-11-24 05:15:02.906 00:05:08.558 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 05:15:35.653 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 42 3080 1 2025-11-24 05:20:08.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50225 1 109 1 2025-11-24 05:20:08.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60725 1 80 1 2025-11-24 05:20:08.856 00:00:00.000 UDP 28.104.0.1:60725 -> 198.28.0.2:53 1 64 1 2025-11-24 05:20:08.855 00:00:00.000 UDP 28.104.0.1:50225 -> 198.28.0.2:53 1 64 1 2025-11-24 05:15:11.449 00:06:00.392 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 05:16:02.955 00:05:08.680 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:15:11.449 00:06:00.077 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 05:16:11.450 00:05:51.465 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 05:21:09.166 00:00:00.000 UDP 28.104.0.1:51698 -> 198.28.0.2:53 1 64 1 2025-11-24 05:21:09.166 00:00:00.000 UDP 28.104.0.1:35896 -> 198.28.0.2:53 1 64 1 2025-11-24 05:21:09.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51698 1 80 1 2025-11-24 05:21:09.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35896 1 109 1 2025-11-24 05:22:05.732 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:22:09.466 00:00:00.000 UDP 28.104.0.1:41340 -> 198.28.0.2:53 1 64 1 2025-11-24 05:22:09.466 00:00:00.000 UDP 28.104.0.1:50817 -> 198.28.0.2:53 1 64 1 2025-11-24 05:18:02.905 00:05:08.741 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 05:22:09.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41340 1 80 1 2025-11-24 05:22:09.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50817 1 109 1 2025-11-24 05:23:09.767 00:00:00.000 UDP 28.104.0.1:34886 -> 198.28.0.2:53 1 64 1 2025-11-24 05:23:09.767 00:00:00.000 UDP 28.104.0.1:33859 -> 198.28.0.2:53 1 64 1 2025-11-24 05:23:09.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34886 1 80 1 2025-11-24 05:23:09.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33859 1 109 1 2025-11-24 05:24:10.076 00:00:00.000 UDP 28.104.0.1:45510 -> 198.28.0.2:53 1 64 1 2025-11-24 05:24:10.076 00:00:00.000 UDP 28.104.0.1:45954 -> 198.28.0.2:53 1 64 1 2025-11-24 05:24:10.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45510 1 109 1 2025-11-24 05:24:10.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45954 1 80 1 2025-11-24 05:20:55.660 00:05:10.027 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2580 1 2025-11-24 05:25:10.370 00:00:00.000 UDP 28.104.0.1:59694 -> 198.28.0.2:53 1 64 1 2025-11-24 05:25:10.370 00:00:00.000 UDP 28.104.0.1:54062 -> 198.28.0.2:53 1 64 1 2025-11-24 05:25:10.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59694 1 80 1 2025-11-24 05:21:02.906 00:05:08.559 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 05:25:10.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54062 1 109 1 2025-11-24 05:26:10.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40116 1 109 1 2025-11-24 05:26:10.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60098 1 80 1 2025-11-24 05:26:10.669 00:00:00.000 UDP 28.104.0.1:60098 -> 198.28.0.2:53 1 64 1 2025-11-24 05:22:02.956 00:05:08.684 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:26:10.669 00:00:00.000 UDP 28.104.0.1:40116 -> 198.28.0.2:53 1 64 1 2025-11-24 05:22:11.453 00:05:51.491 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 05:27:06.169 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:27:10.962 00:00:00.000 UDP 28.104.0.1:37174 -> 198.28.0.2:53 1 64 1 2025-11-24 05:22:11.454 00:06:00.388 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 05:27:10.962 00:00:00.000 UDP 28.104.0.1:40973 -> 198.28.0.2:53 1 64 1 2025-11-24 05:22:11.453 00:06:00.079 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 05:27:10.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37174 1 80 1 2025-11-24 05:27:10.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40973 1 109 1 2025-11-24 05:28:11.264 00:00:00.000 UDP 28.104.0.1:50121 -> 198.28.0.2:53 1 64 1 2025-11-24 05:28:11.264 00:00:00.000 UDP 28.104.0.1:37488 -> 198.28.0.2:53 1 64 1 2025-11-24 05:28:11.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37488 1 109 1 2025-11-24 05:28:11.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50121 1 80 1 2025-11-24 05:24:02.905 00:05:08.745 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 05:29:11.556 00:00:00.000 UDP 28.104.0.1:42371 -> 198.28.0.2:53 1 64 1 2025-11-24 05:29:11.556 00:00:00.000 UDP 28.104.0.1:35021 -> 198.28.0.2:53 1 64 1 2025-11-24 05:29:11.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42371 1 80 1 2025-11-24 05:29:11.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35021 1 109 1 2025-11-24 05:30:11.864 00:00:00.000 UDP 28.104.0.1:44585 -> 198.28.0.2:53 1 64 1 2025-11-24 05:30:11.863 00:00:00.000 UDP 28.104.0.1:44166 -> 198.28.0.2:53 1 64 1 2025-11-24 05:30:11.874 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44166 1 109 1 2025-11-24 05:30:11.874 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44585 1 80 1 2025-11-24 05:26:15.676 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-11-24 05:27:02.934 00:05:08.531 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 05:31:12.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56474 1 80 1 2025-11-24 05:31:12.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59877 1 109 1 2025-11-24 05:31:12.182 00:00:00.000 UDP 28.104.0.1:56474 -> 198.28.0.2:53 1 64 1 2025-11-24 05:31:12.183 00:00:00.000 UDP 28.104.0.1:59877 -> 198.28.0.2:53 1 64 1 2025-11-24 05:32:05.853 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:32:12.531 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49309 1 109 1 2025-11-24 05:32:12.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37399 1 80 1 2025-11-24 05:28:02.985 00:05:08.656 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:32:12.519 00:00:00.000 UDP 28.104.0.1:37399 -> 198.28.0.2:53 1 64 1 2025-11-24 05:32:12.522 00:00:00.000 UDP 28.104.0.1:49309 -> 198.28.0.2:53 1 64 1 2025-11-24 05:28:11.454 00:05:51.491 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 05:33:12.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36159 1 109 1 2025-11-24 05:33:12.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41279 1 80 1 2025-11-24 05:33:12.821 00:00:00.000 UDP 28.104.0.1:36159 -> 198.28.0.2:53 1 64 1 2025-11-24 05:33:12.821 00:00:00.000 UDP 28.104.0.1:41279 -> 198.28.0.2:53 1 64 1 2025-11-24 05:29:11.454 00:06:00.391 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 05:34:13.117 00:00:00.000 UDP 28.104.0.1:56309 -> 198.28.0.2:53 1 64 1 2025-11-24 05:34:13.117 00:00:00.000 UDP 28.104.0.1:48987 -> 198.28.0.2:53 1 64 1 2025-11-24 05:29:11.454 00:06:00.078 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 05:34:13.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56309 1 80 1 2025-11-24 05:30:02.936 00:05:08.717 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 05:34:13.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48987 1 109 1 2025-11-24 05:35:13.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34160 1 109 1 2025-11-24 05:35:13.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33494 1 80 1 2025-11-24 05:35:13.375 00:00:00.000 UDP 28.104.0.1:34160 -> 198.28.0.2:53 1 64 1 2025-11-24 05:35:13.375 00:00:00.000 UDP 28.104.0.1:33494 -> 198.28.0.2:53 1 64 1 2025-11-24 05:31:35.683 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-24 05:36:13.667 00:00:00.000 UDP 28.104.0.1:45127 -> 198.28.0.2:53 1 64 1 2025-11-24 05:36:13.667 00:00:00.000 UDP 28.104.0.1:42881 -> 198.28.0.2:53 1 64 1 2025-11-24 05:36:13.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45127 1 109 1 2025-11-24 05:36:13.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42881 1 80 1 2025-11-24 05:37:13.922 00:00:00.000 UDP 28.104.0.1:41759 -> 198.28.0.2:53 1 64 1 2025-11-24 05:37:13.922 00:00:00.000 UDP 28.104.0.1:41872 -> 198.28.0.2:53 1 64 1 2025-11-24 05:37:05.847 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:37:13.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41872 1 109 1 2025-11-24 05:33:02.935 00:05:08.552 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 05:37:13.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41759 1 80 1 2025-11-24 05:34:02.985 00:05:08.657 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:38:14.231 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43198 1 109 1 2025-11-24 05:38:14.231 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36565 1 80 1 2025-11-24 05:38:14.220 00:00:00.000 UDP 28.104.0.1:36565 -> 198.28.0.2:53 1 64 1 2025-11-24 05:38:14.220 00:00:00.000 UDP 28.104.0.1:43198 -> 198.28.0.2:53 1 64 1 2025-11-24 05:34:11.463 00:05:51.483 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 05:39:14.515 00:00:00.000 UDP 28.104.0.1:52385 -> 198.28.0.2:53 1 64 1 2025-11-24 05:39:14.515 00:00:00.000 UDP 28.104.0.1:35277 -> 198.28.0.2:53 1 64 1 2025-11-24 05:39:14.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52385 1 109 1 2025-11-24 05:39:14.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35277 1 80 1 2025-11-24 05:36:02.936 00:05:08.717 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 05:40:14.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51199 1 109 1 2025-11-24 05:40:14.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33885 1 80 1 2025-11-24 05:40:14.802 00:00:00.000 UDP 28.104.0.1:51199 -> 198.28.0.2:53 1 64 1 2025-11-24 05:40:14.802 00:00:00.000 UDP 28.104.0.1:33885 -> 198.28.0.2:53 1 64 1 2025-11-24 05:36:55.687 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2516 1 2025-11-24 05:36:11.463 00:06:00.073 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 05:36:11.463 00:06:00.385 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 05:41:15.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41023 1 109 1 2025-11-24 05:41:15.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33046 1 80 1 2025-11-24 05:41:15.106 00:00:00.000 UDP 28.104.0.1:41023 -> 198.28.0.2:53 1 64 1 2025-11-24 05:41:15.106 00:00:00.000 UDP 28.104.0.1:33046 -> 198.28.0.2:53 1 64 1 2025-11-24 05:42:05.997 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:42:15.402 00:00:00.000 UDP 28.104.0.1:46827 -> 198.28.0.2:53 1 64 1 2025-11-24 05:42:15.402 00:00:00.000 UDP 28.104.0.1:34772 -> 198.28.0.2:53 1 64 1 2025-11-24 05:42:15.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34772 1 109 1 2025-11-24 05:42:15.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46827 1 80 1 2025-11-24 05:39:02.936 00:05:08.538 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 05:43:15.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43019 1 109 1 2025-11-24 05:43:15.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40137 1 80 1 2025-11-24 05:43:15.686 00:00:00.000 UDP 28.104.0.1:40137 -> 198.28.0.2:53 1 64 1 2025-11-24 05:43:15.687 00:00:00.000 UDP 28.104.0.1:43019 -> 198.28.0.2:53 1 64 1 2025-11-24 05:40:02.986 00:05:08.658 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:44:15.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54715 1 80 1 2025-11-24 05:44:15.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49570 1 109 1 2025-11-24 05:44:15.980 00:00:00.000 UDP 28.104.0.1:54715 -> 198.28.0.2:53 1 64 1 2025-11-24 05:44:15.980 00:00:00.000 UDP 28.104.0.1:49570 -> 198.28.0.2:53 1 64 1 2025-11-24 05:40:11.464 00:05:51.483 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 05:45:16.284 00:00:00.000 UDP 28.104.0.1:38517 -> 198.28.0.2:53 1 64 1 2025-11-24 05:45:16.285 00:00:00.000 UDP 28.104.0.1:59600 -> 198.28.0.2:53 1 64 1 2025-11-24 05:45:16.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59600 1 80 1 2025-11-24 05:45:16.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38517 1 109 1 2025-11-24 05:42:02.937 00:05:08.716 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 05:46:16.588 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58537 1 80 1 2025-11-24 05:46:16.588 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56314 1 109 1 2025-11-24 05:46:16.580 00:00:00.000 UDP 28.104.0.1:56314 -> 198.28.0.2:53 1 64 1 2025-11-24 05:46:16.579 00:00:00.000 UDP 28.104.0.1:58537 -> 198.28.0.2:53 1 64 1 2025-11-24 05:42:15.692 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-11-24 05:47:06.292 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:47:16.866 00:00:00.000 UDP 28.104.0.1:42782 -> 198.28.0.2:53 1 64 1 2025-11-24 05:47:16.866 00:00:00.000 UDP 28.104.0.1:52381 -> 198.28.0.2:53 1 64 1 2025-11-24 05:47:16.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42782 1 109 1 2025-11-24 05:47:16.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52381 1 80 1 2025-11-24 05:43:11.464 00:06:00.075 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 05:43:11.465 00:06:00.386 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 05:48:17.178 00:00:00.000 UDP 28.104.0.1:42556 -> 198.28.0.2:53 1 64 1 2025-11-24 05:48:17.178 00:00:00.000 UDP 28.104.0.1:53512 -> 198.28.0.2:53 1 64 1 2025-11-24 05:48:17.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53512 1 109 1 2025-11-24 05:48:17.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42556 1 80 1 2025-11-24 05:49:17.467 00:00:00.000 UDP 28.104.0.1:49508 -> 198.28.0.2:53 1 64 1 2025-11-24 05:49:17.467 00:00:00.000 UDP 28.104.0.1:38513 -> 198.28.0.2:53 1 64 1 2025-11-24 05:45:02.938 00:05:08.543 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 05:49:17.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49508 1 80 1 2025-11-24 05:49:17.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38513 1 109 1 2025-11-24 05:46:02.988 00:05:08.658 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:50:17.755 00:00:00.000 UDP 28.104.0.1:44560 -> 198.28.0.2:53 1 64 1 2025-11-24 05:50:17.755 00:00:00.000 UDP 28.104.0.1:40781 -> 198.28.0.2:53 1 64 1 2025-11-24 05:50:17.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40781 1 80 1 2025-11-24 05:50:17.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44560 1 109 1 2025-11-24 05:46:11.465 00:05:51.486 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 05:51:18.055 00:00:00.000 UDP 28.104.0.1:50810 -> 198.28.0.2:53 1 64 1 2025-11-24 05:51:18.055 00:00:00.000 UDP 28.104.0.1:52805 -> 198.28.0.2:53 1 64 1 2025-11-24 05:51:18.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50810 1 80 1 2025-11-24 05:51:18.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52805 1 109 1 2025-11-24 05:47:35.699 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 43 3168 1 2025-11-24 05:52:06.201 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:48:02.940 00:05:08.723 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 05:52:18.347 00:00:00.000 UDP 28.104.0.1:59343 -> 198.28.0.2:53 1 64 1 2025-11-24 05:52:18.347 00:00:00.000 UDP 28.104.0.1:54288 -> 198.28.0.2:53 1 64 1 2025-11-24 05:52:18.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59343 1 80 1 2025-11-24 05:52:18.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54288 1 109 1 2025-11-24 05:53:18.651 00:00:00.000 UDP 28.104.0.1:60194 -> 198.28.0.2:53 1 64 1 2025-11-24 05:53:18.651 00:00:00.000 UDP 28.104.0.1:44384 -> 198.28.0.2:53 1 64 1 2025-11-24 05:53:18.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60194 1 80 1 2025-11-24 05:53:18.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44384 1 109 1 2025-11-24 05:54:18.948 00:00:00.000 UDP 28.104.0.1:37969 -> 198.28.0.2:53 1 64 1 2025-11-24 05:54:18.948 00:00:00.000 UDP 28.104.0.1:54563 -> 198.28.0.2:53 1 64 1 2025-11-24 05:54:18.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37969 1 80 1 2025-11-24 05:54:18.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54563 1 109 1 2025-11-24 05:50:11.470 00:06:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 05:50:11.470 00:06:00.381 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 05:51:02.941 00:05:08.541 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 05:55:19.195 00:00:00.000 UDP 28.104.0.1:34691 -> 198.28.0.2:53 1 64 1 2025-11-24 05:55:19.195 00:00:00.000 UDP 28.104.0.1:35872 -> 198.28.0.2:53 1 64 1 2025-11-24 05:55:19.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35872 1 109 1 2025-11-24 05:55:19.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34691 1 80 1 2025-11-24 05:52:02.992 00:05:08.662 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:56:19.486 00:00:00.000 UDP 28.104.0.1:38434 -> 198.28.0.2:53 1 64 1 2025-11-24 05:56:19.486 00:00:00.000 UDP 28.104.0.1:58271 -> 198.28.0.2:53 1 64 1 2025-11-24 05:56:19.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58271 1 109 1 2025-11-24 05:56:19.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38434 1 80 1 2025-11-24 05:52:11.472 00:05:51.479 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 05:52:55.705 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2580 1 2025-11-24 05:57:06.311 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:57:19.791 00:00:00.000 UDP 28.104.0.1:40047 -> 198.28.0.2:53 1 64 1 2025-11-24 05:57:19.791 00:00:00.000 UDP 28.104.0.1:48604 -> 198.28.0.2:53 1 64 1 2025-11-24 05:57:19.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40047 1 80 1 2025-11-24 05:57:19.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48604 1 109 1 2025-11-24 05:54:02.941 00:05:08.725 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 05:58:20.124 00:00:00.000 UDP 28.104.0.1:39435 -> 198.28.0.2:53 1 64 1 2025-11-24 05:58:20.124 00:00:00.000 UDP 28.104.0.1:56314 -> 198.28.0.2:53 1 64 1 2025-11-24 05:58:20.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56314 1 109 1 2025-11-24 05:58:20.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39435 1 80 1 Summary: total flows: 321, total bytes: 95510, total packets: 1409, avg bps: 195, avg pps: 0, avg bpp: 67 Time window: 2025-11-24 04:54:11 - 2025-11-24 05:59:11 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0042s User: 0.0025s Wall: 0.0039s flows/second: 82201.1 Runtime: 0.0039s