Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 05:59:20.399 00:00:00.000 UDP 28.104.0.1:42021 -> 198.28.0.2:53 1 64 1 2025-11-24 05:59:20.399 00:00:00.000 UDP 28.104.0.1:54730 -> 198.28.0.2:53 1 64 1 2025-11-24 05:59:20.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42021 1 80 1 2025-11-24 05:59:20.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54730 1 109 1 2025-11-24 06:00:20.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34111 1 80 1 2025-11-24 06:00:20.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43426 1 109 1 2025-11-24 06:00:20.697 00:00:00.000 UDP 28.104.0.1:34111 -> 198.28.0.2:53 1 64 1 2025-11-24 06:00:20.698 00:00:00.000 UDP 28.104.0.1:43426 -> 198.28.0.2:53 1 64 1 2025-11-24 05:57:02.941 00:05:08.542 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 06:01:21.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56422 1 109 1 2025-11-24 06:01:21.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53140 1 80 1 2025-11-24 06:01:20.996 00:00:00.000 UDP 28.104.0.1:53140 -> 198.28.0.2:53 1 64 1 2025-11-24 06:01:20.996 00:00:00.000 UDP 28.104.0.1:56422 -> 198.28.0.2:53 1 64 1 2025-11-24 06:02:06.428 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 05:57:11.472 00:06:00.383 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 05:58:02.991 00:05:08.666 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 05:57:11.471 00:06:00.070 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 06:02:21.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56766 1 80 1 2025-11-24 06:02:21.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34837 1 109 1 2025-11-24 06:02:21.303 00:00:00.000 UDP 28.104.0.1:34837 -> 198.28.0.2:53 1 64 1 2025-11-24 06:02:21.303 00:00:00.000 UDP 28.104.0.1:56766 -> 198.28.0.2:53 1 64 1 2025-11-24 05:58:15.708 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-24 05:58:11.472 00:05:51.482 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 06:03:21.558 00:00:00.000 UDP 28.104.0.1:46313 -> 198.28.0.2:53 1 64 1 2025-11-24 06:03:21.557 00:00:00.000 UDP 28.104.0.1:45383 -> 198.28.0.2:53 1 64 1 2025-11-24 06:03:21.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45383 1 109 1 2025-11-24 06:03:21.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46313 1 80 1 2025-11-24 06:00:02.944 00:05:08.723 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 06:04:21.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40123 1 109 1 2025-11-24 06:04:21.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58965 1 80 1 2025-11-24 06:04:21.848 00:00:00.000 UDP 28.104.0.1:58965 -> 198.28.0.2:53 1 64 1 2025-11-24 06:04:21.848 00:00:00.000 UDP 28.104.0.1:40123 -> 198.28.0.2:53 1 64 1 2025-11-24 06:05:22.180 00:00:00.000 UDP 28.104.0.1:48340 -> 198.28.0.2:53 1 64 1 2025-11-24 06:05:22.181 00:00:00.000 UDP 28.104.0.1:50491 -> 198.28.0.2:53 1 64 1 2025-11-24 06:05:22.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50491 1 80 1 2025-11-24 06:05:22.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48340 1 109 1 2025-11-24 06:06:22.477 00:00:00.000 UDP 28.104.0.1:44626 -> 198.28.0.2:53 1 64 1 2025-11-24 06:06:22.477 00:00:00.000 UDP 28.104.0.1:34790 -> 198.28.0.2:53 1 64 1 2025-11-24 06:06:22.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34790 1 109 1 2025-11-24 06:06:22.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44626 1 80 1 2025-11-24 06:07:06.538 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:03:02.944 00:05:08.547 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 06:07:22.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36269 1 109 1 2025-11-24 06:07:22.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48463 1 80 1 2025-11-24 06:07:22.781 00:00:00.000 UDP 28.104.0.1:36269 -> 198.28.0.2:53 1 64 1 2025-11-24 06:07:22.781 00:00:00.000 UDP 28.104.0.1:48463 -> 198.28.0.2:53 1 64 1 2025-11-24 06:03:35.715 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-24 06:04:02.994 00:05:08.664 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 06:08:23.090 00:00:00.000 UDP 28.104.0.1:35695 -> 198.28.0.2:53 1 64 1 2025-11-24 06:08:23.091 00:00:00.000 UDP 28.104.0.1:34454 -> 198.28.0.2:53 1 64 1 2025-11-24 06:08:23.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34454 1 109 1 2025-11-24 06:08:23.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35695 1 80 1 2025-11-24 06:04:11.475 00:05:51.481 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 06:04:11.476 00:06:00.391 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 06:04:11.476 00:06:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 06:09:23.388 00:00:00.000 UDP 28.104.0.1:43957 -> 198.28.0.2:53 1 64 1 2025-11-24 06:09:23.388 00:00:00.000 UDP 28.104.0.1:34284 -> 198.28.0.2:53 1 64 1 2025-11-24 06:09:23.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34284 1 109 1 2025-11-24 06:09:23.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43957 1 80 1 2025-11-24 06:06:02.944 00:05:08.724 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 06:10:23.694 00:00:00.000 UDP 28.104.0.1:39445 -> 198.28.0.2:53 1 64 1 2025-11-24 06:10:23.694 00:00:00.000 UDP 28.104.0.1:51606 -> 198.28.0.2:53 1 64 1 2025-11-24 06:10:23.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51606 1 80 1 2025-11-24 06:10:23.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39445 1 109 1 2025-11-24 06:11:23.994 00:00:00.000 UDP 28.104.0.1:47471 -> 198.28.0.2:53 1 64 1 2025-11-24 06:11:23.994 00:00:00.000 UDP 28.104.0.1:49304 -> 198.28.0.2:53 1 64 1 2025-11-24 06:11:24.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47471 1 80 1 2025-11-24 06:11:24.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49304 1 109 1 2025-11-24 06:12:06.532 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:12:24.310 00:00:00.000 UDP 28.104.0.1:50524 -> 198.28.0.2:53 1 64 1 2025-11-24 06:12:24.310 00:00:00.000 UDP 28.104.0.1:49868 -> 198.28.0.2:53 1 64 1 2025-11-24 06:12:24.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50524 1 80 1 2025-11-24 06:12:24.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49868 1 109 1 2025-11-24 06:08:55.721 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2772 1 2025-11-24 06:09:02.945 00:05:08.545 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 06:13:24.621 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41766 1 80 1 2025-11-24 06:13:24.621 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41809 1 109 1 2025-11-24 06:13:24.610 00:00:00.000 UDP 28.104.0.1:41809 -> 198.28.0.2:53 1 64 1 2025-11-24 06:13:24.610 00:00:00.000 UDP 28.104.0.1:41766 -> 198.28.0.2:53 1 64 1 2025-11-24 06:10:02.996 00:05:08.663 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 06:14:24.882 00:00:00.000 UDP 28.104.0.1:50498 -> 198.28.0.2:53 1 64 1 2025-11-24 06:14:24.883 00:00:00.000 UDP 28.104.0.1:40105 -> 198.28.0.2:53 1 64 1 2025-11-24 06:14:24.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40105 1 80 1 2025-11-24 06:14:24.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50498 1 109 1 2025-11-24 06:10:11.480 00:05:51.477 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 06:15:25.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57413 1 80 1 2025-11-24 06:15:25.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39254 1 109 1 2025-11-24 06:15:25.177 00:00:00.000 UDP 28.104.0.1:57413 -> 198.28.0.2:53 1 64 1 2025-11-24 06:15:25.178 00:00:00.000 UDP 28.104.0.1:39254 -> 198.28.0.2:53 1 64 1 2025-11-24 06:11:11.480 00:06:00.384 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 06:11:11.480 00:06:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 06:12:02.945 00:05:08.723 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 06:16:25.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45534 1 109 1 2025-11-24 06:16:25.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41132 1 80 1 2025-11-24 06:16:25.445 00:00:00.000 UDP 28.104.0.1:45534 -> 198.28.0.2:53 1 64 1 2025-11-24 06:16:25.445 00:00:00.000 UDP 28.104.0.1:41132 -> 198.28.0.2:53 1 64 1 2025-11-24 06:17:06.696 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:17:25.739 00:00:00.000 UDP 28.104.0.1:49783 -> 198.28.0.2:53 1 64 1 2025-11-24 06:17:25.739 00:00:00.000 UDP 28.104.0.1:52614 -> 198.28.0.2:53 1 64 1 2025-11-24 06:17:25.751 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52614 1 109 1 2025-11-24 06:17:25.751 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49783 1 80 1 2025-11-24 06:18:26.058 00:00:00.000 UDP 28.104.0.1:35096 -> 198.28.0.2:53 1 64 1 2025-11-24 06:14:15.725 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 42 3064 1 2025-11-24 06:18:26.057 00:00:00.000 UDP 28.104.0.1:60623 -> 198.28.0.2:53 1 64 1 2025-11-24 06:18:26.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60623 1 80 1 2025-11-24 06:18:26.075 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35096 1 109 1 2025-11-24 06:15:02.948 00:05:08.543 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 06:19:26.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41042 1 80 1 2025-11-24 06:19:26.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40820 1 109 1 2025-11-24 06:19:26.356 00:00:00.000 UDP 28.104.0.1:41042 -> 198.28.0.2:53 1 64 1 2025-11-24 06:19:26.356 00:00:00.000 UDP 28.104.0.1:40820 -> 198.28.0.2:53 1 64 1 2025-11-24 06:16:02.997 00:05:00.003 TCP 28.156.0.1:179 -> 28.151.0.1:39145 11 667 1 2025-11-24 06:20:26.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43716 1 109 1 2025-11-24 06:20:26.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49487 1 80 1 2025-11-24 06:20:26.651 00:00:00.000 UDP 28.104.0.1:49487 -> 198.28.0.2:53 1 64 1 2025-11-24 06:20:26.651 00:00:00.000 UDP 28.104.0.1:43716 -> 198.28.0.2:53 1 64 1 2025-11-24 06:16:11.481 00:05:51.479 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 06:21:26.945 00:00:00.000 UDP 28.104.0.1:48000 -> 198.28.0.2:53 1 64 1 2025-11-24 06:21:26.945 00:00:00.000 UDP 28.104.0.1:47609 -> 198.28.0.2:53 1 64 1 2025-11-24 06:21:26.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48000 1 80 1 2025-11-24 06:21:26.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47609 1 109 1 2025-11-24 06:22:06.836 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:18:02.948 00:05:08.723 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 06:22:27.240 00:00:00.000 UDP 28.104.0.1:52627 -> 198.28.0.2:53 1 64 1 2025-11-24 06:22:27.239 00:00:00.000 UDP 28.104.0.1:56004 -> 198.28.0.2:53 1 64 1 2025-11-24 06:22:27.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52627 1 109 1 2025-11-24 06:22:27.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56004 1 80 1 2025-11-24 06:18:11.480 00:06:00.385 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 06:18:11.480 00:06:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 06:23:27.545 00:00:00.000 UDP 28.104.0.1:35523 -> 198.28.0.2:53 1 64 1 2025-11-24 06:23:27.545 00:00:00.000 UDP 28.104.0.1:58259 -> 198.28.0.2:53 1 64 1 2025-11-24 06:23:27.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58259 1 80 1 2025-11-24 06:23:27.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35523 1 109 1 2025-11-24 06:19:35.729 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2436 1 2025-11-24 06:24:27.848 00:00:00.000 UDP 28.104.0.1:53463 -> 198.28.0.2:53 1 64 1 2025-11-24 06:24:27.848 00:00:00.000 UDP 28.104.0.1:55329 -> 198.28.0.2:53 1 64 1 2025-11-24 06:24:27.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53463 1 109 1 2025-11-24 06:24:27.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55329 1 80 1 2025-11-24 06:21:02.948 00:05:08.564 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 06:25:36.061 00:00:00.000 UDP 28.104.0.1:52110 -> 198.28.0.2:53 1 64 1 2025-11-24 06:25:36.061 00:00:00.000 UDP 28.104.0.1:48769 -> 198.28.0.2:53 1 64 1 2025-11-24 06:25:36.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48769 1 109 1 2025-11-24 06:25:36.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52110 1 80 1 2025-11-24 06:21:11.661 00:05:51.341 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 06:26:36.368 00:00:00.000 UDP 28.104.0.1:50689 -> 198.28.0.2:53 1 64 1 2025-11-24 06:26:36.368 00:00:00.000 UDP 28.104.0.1:37698 -> 198.28.0.2:53 1 64 1 2025-11-24 06:26:36.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50689 1 109 1 2025-11-24 06:26:36.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37698 1 80 1 2025-11-24 06:22:11.482 00:05:51.481 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 06:27:06.919 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:27:36.672 00:00:00.000 UDP 28.104.0.1:42581 -> 198.28.0.2:53 1 64 1 2025-11-24 06:27:36.672 00:00:00.000 UDP 28.104.0.1:40431 -> 198.28.0.2:53 1 64 1 2025-11-24 06:27:36.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40431 1 109 1 2025-11-24 06:27:36.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42581 1 80 1 2025-11-24 06:24:02.949 00:05:08.727 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 06:28:36.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47041 1 80 1 2025-11-24 06:28:36.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46368 1 109 1 2025-11-24 06:28:36.969 00:00:00.000 UDP 28.104.0.1:47041 -> 198.28.0.2:53 1 64 1 2025-11-24 06:28:36.969 00:00:00.000 UDP 28.104.0.1:46368 -> 198.28.0.2:53 1 64 1 2025-11-24 06:24:55.740 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-24 06:29:37.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50040 1 109 1 2025-11-24 06:29:37.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39585 1 80 1 2025-11-24 06:29:37.272 00:00:00.000 UDP 28.104.0.1:50040 -> 198.28.0.2:53 1 64 1 2025-11-24 06:29:37.272 00:00:00.000 UDP 28.104.0.1:39585 -> 198.28.0.2:53 1 64 1 2025-11-24 06:25:11.483 00:06:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 06:25:11.483 00:06:00.398 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 06:30:37.588 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33831 1 80 1 2025-11-24 06:30:37.588 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50535 1 109 1 2025-11-24 06:30:37.579 00:00:00.000 UDP 28.104.0.1:50535 -> 198.28.0.2:53 1 64 1 2025-11-24 06:30:37.579 00:00:00.000 UDP 28.104.0.1:33831 -> 198.28.0.2:53 1 64 1 2025-11-24 06:27:02.953 00:05:08.560 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 06:31:37.887 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51398 1 109 1 2025-11-24 06:31:37.887 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53219 1 80 1 2025-11-24 06:31:37.876 00:00:00.000 UDP 28.104.0.1:53219 -> 198.28.0.2:53 1 64 1 2025-11-24 06:31:37.876 00:00:00.000 UDP 28.104.0.1:51398 -> 198.28.0.2:53 1 64 1 2025-11-24 06:27:11.666 00:05:51.340 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 06:32:06.797 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:32:38.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60835 1 109 1 2025-11-24 06:32:38.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53483 1 80 1 2025-11-24 06:32:38.190 00:00:00.000 UDP 28.104.0.1:60835 -> 198.28.0.2:53 1 64 1 2025-11-24 06:32:38.190 00:00:00.000 UDP 28.104.0.1:53483 -> 198.28.0.2:53 1 64 1 2025-11-24 06:28:11.500 00:05:51.465 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 06:33:38.449 00:00:00.000 UDP 28.104.0.1:53209 -> 198.28.0.2:53 1 64 1 2025-11-24 06:33:38.450 00:00:00.000 UDP 28.104.0.1:56804 -> 198.28.0.2:53 1 64 1 2025-11-24 06:33:38.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56804 1 80 1 2025-11-24 06:33:38.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53209 1 109 1 2025-11-24 06:30:02.952 00:05:08.725 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 06:30:15.752 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-24 06:34:38.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43264 1 109 1 2025-11-24 06:34:38.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46983 1 80 1 2025-11-24 06:34:38.755 00:00:00.000 UDP 28.104.0.1:46983 -> 198.28.0.2:53 1 64 1 2025-11-24 06:34:38.755 00:00:00.000 UDP 28.104.0.1:43264 -> 198.28.0.2:53 1 64 1 2025-11-24 06:35:39.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54314 1 109 1 2025-11-24 06:35:39.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44369 1 80 1 2025-11-24 06:35:39.059 00:00:00.000 UDP 28.104.0.1:44369 -> 198.28.0.2:53 1 64 1 2025-11-24 06:35:39.059 00:00:00.000 UDP 28.104.0.1:54314 -> 198.28.0.2:53 1 64 1 2025-11-24 06:36:39.355 00:00:00.000 UDP 28.104.0.1:41739 -> 198.28.0.2:53 1 64 1 2025-11-24 06:36:39.354 00:00:00.000 UDP 28.104.0.1:44849 -> 198.28.0.2:53 1 64 1 2025-11-24 06:36:39.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44849 1 80 1 2025-11-24 06:36:39.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41739 1 109 1 2025-11-24 06:37:06.923 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:32:11.503 00:06:00.383 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 06:32:11.503 00:06:00.056 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 06:33:02.953 00:05:08.559 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 06:37:39.646 00:00:00.000 UDP 28.104.0.1:53212 -> 198.28.0.2:53 1 64 1 2025-11-24 06:37:39.646 00:00:00.000 UDP 28.104.0.1:49860 -> 198.28.0.2:53 1 64 1 2025-11-24 06:37:39.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53212 1 109 1 2025-11-24 06:37:39.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49860 1 80 1 2025-11-24 06:33:11.667 00:05:51.344 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 06:38:39.935 00:00:00.000 UDP 28.104.0.1:33337 -> 198.28.0.2:53 1 64 1 2025-11-24 06:38:39.935 00:00:00.000 UDP 28.104.0.1:53420 -> 198.28.0.2:53 1 64 1 2025-11-24 06:38:39.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53420 1 109 1 2025-11-24 06:38:39.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33337 1 80 1 2025-11-24 06:34:11.501 00:05:51.469 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 06:39:40.243 00:00:00.000 UDP 28.104.0.1:36817 -> 198.28.0.2:53 1 64 1 2025-11-24 06:39:40.241 00:00:00.000 UDP 28.104.0.1:53169 -> 198.28.0.2:53 1 64 1 2025-11-24 06:39:40.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53169 1 80 1 2025-11-24 06:39:40.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36817 1 109 1 2025-11-24 06:35:35.762 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2676 1 2025-11-24 06:36:02.956 00:05:08.722 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 06:40:40.537 00:00:00.000 UDP 28.104.0.1:39119 -> 198.28.0.2:53 1 64 1 2025-11-24 06:40:40.537 00:00:00.000 UDP 28.104.0.1:48505 -> 198.28.0.2:53 1 64 1 2025-11-24 06:40:40.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39119 1 80 1 2025-11-24 06:40:40.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48505 1 109 1 2025-11-24 06:41:40.834 00:00:00.000 UDP 28.104.0.1:36986 -> 198.28.0.2:53 1 64 1 2025-11-24 06:41:40.834 00:00:00.000 UDP 28.104.0.1:54216 -> 198.28.0.2:53 1 64 1 2025-11-24 06:41:40.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36986 1 80 1 2025-11-24 06:41:40.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54216 1 109 1 2025-11-24 06:42:07.355 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:42:41.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59514 1 80 1 2025-11-24 06:42:41.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41243 1 109 1 2025-11-24 06:42:41.105 00:00:00.000 UDP 28.104.0.1:59514 -> 198.28.0.2:53 1 64 1 2025-11-24 06:42:41.105 00:00:00.000 UDP 28.104.0.1:41243 -> 198.28.0.2:53 1 64 1 2025-11-24 06:39:02.959 00:05:08.557 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 06:43:41.427 00:00:00.000 UDP 28.104.0.1:43566 -> 198.28.0.2:53 1 64 1 2025-11-24 06:43:41.427 00:00:00.000 UDP 28.104.0.1:54191 -> 198.28.0.2:53 1 64 1 2025-11-24 06:43:41.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54191 1 80 1 2025-11-24 06:43:41.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43566 1 109 1 2025-11-24 06:39:11.669 00:05:51.343 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 06:39:11.503 00:06:00.384 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 06:39:11.503 00:06:00.057 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 06:44:41.727 00:00:00.000 UDP 28.104.0.1:50183 -> 198.28.0.2:53 1 64 1 2025-11-24 06:44:41.727 00:00:00.000 UDP 28.104.0.1:40778 -> 198.28.0.2:53 1 64 1 2025-11-24 06:44:41.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50183 1 109 1 2025-11-24 06:44:41.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40778 1 80 1 2025-11-24 06:40:11.503 00:05:51.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 06:40:55.085 00:05:10.680 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2776 1 2025-11-24 06:45:42.045 00:00:00.000 UDP 28.104.0.1:44744 -> 198.28.0.2:53 1 64 1 2025-11-24 06:45:42.046 00:00:00.000 UDP 28.104.0.1:47743 -> 198.28.0.2:53 1 64 1 2025-11-24 06:45:42.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47743 1 109 1 2025-11-24 06:45:42.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44744 1 80 1 2025-11-24 06:42:02.961 00:05:08.720 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 06:46:42.360 00:00:00.000 UDP 28.104.0.1:41043 -> 198.28.0.2:53 1 64 1 2025-11-24 06:46:42.360 00:00:00.000 UDP 28.104.0.1:51865 -> 198.28.0.2:53 1 64 1 2025-11-24 06:46:42.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41043 1 80 1 2025-11-24 06:46:42.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51865 1 109 1 2025-11-24 06:47:07.284 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:47:42.659 00:00:00.000 UDP 28.104.0.1:45131 -> 198.28.0.2:53 1 64 1 2025-11-24 06:47:42.659 00:00:00.000 UDP 28.104.0.1:44096 -> 198.28.0.2:53 1 64 1 2025-11-24 06:47:42.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45131 1 80 1 2025-11-24 06:47:42.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44096 1 109 1 2025-11-24 06:48:42.964 00:00:00.000 UDP 28.104.0.1:57453 -> 198.28.0.2:53 1 64 1 2025-11-24 06:48:42.964 00:00:00.000 UDP 28.104.0.1:56174 -> 198.28.0.2:53 1 64 1 2025-11-24 06:48:42.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56174 1 80 1 2025-11-24 06:48:42.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57453 1 109 1 2025-11-24 06:45:02.961 00:05:08.558 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 06:49:43.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40339 1 109 1 2025-11-24 06:49:43.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32796 1 80 1 2025-11-24 06:49:43.262 00:00:00.000 UDP 28.104.0.1:32796 -> 198.28.0.2:53 1 64 1 2025-11-24 06:49:43.263 00:00:00.000 UDP 28.104.0.1:40339 -> 198.28.0.2:53 1 64 1 2025-11-24 06:45:11.670 00:05:51.343 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 06:46:15.764 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2640 1 2025-11-24 06:50:43.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51122 1 80 1 2025-11-24 06:50:43.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33621 1 109 1 2025-11-24 06:50:43.569 00:00:00.000 UDP 28.104.0.1:33621 -> 198.28.0.2:53 1 64 1 2025-11-24 06:50:43.569 00:00:00.000 UDP 28.104.0.1:51122 -> 198.28.0.2:53 1 64 1 2025-11-24 06:46:11.507 00:05:51.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 06:46:11.507 00:06:00.382 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 06:46:11.507 00:06:00.054 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 06:51:43.869 00:00:00.000 UDP 28.104.0.1:39267 -> 198.28.0.2:53 1 64 1 2025-11-24 06:51:43.869 00:00:00.000 UDP 28.104.0.1:37060 -> 198.28.0.2:53 1 64 1 2025-11-24 06:51:43.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37060 1 80 1 2025-11-24 06:51:43.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39267 1 109 1 2025-11-24 06:52:07.534 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:48:02.961 00:05:08.721 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 06:52:44.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48586 1 109 1 2025-11-24 06:52:44.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51919 1 80 1 2025-11-24 06:52:44.143 00:00:00.000 UDP 28.104.0.1:48586 -> 198.28.0.2:53 1 64 1 2025-11-24 06:52:44.142 00:00:00.000 UDP 28.104.0.1:51919 -> 198.28.0.2:53 1 64 1 2025-11-24 06:53:44.439 00:00:00.000 UDP 28.104.0.1:41481 -> 198.28.0.2:53 1 64 1 2025-11-24 06:53:44.439 00:00:00.000 UDP 28.104.0.1:35540 -> 198.28.0.2:53 1 64 1 2025-11-24 06:53:44.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35540 1 80 1 2025-11-24 06:53:44.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41481 1 109 1 2025-11-24 06:54:44.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56605 1 109 1 2025-11-24 06:54:44.751 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42709 1 80 1 2025-11-24 06:54:44.740 00:00:00.000 UDP 28.104.0.1:42709 -> 198.28.0.2:53 1 64 1 2025-11-24 06:54:44.740 00:00:00.000 UDP 28.104.0.1:56605 -> 198.28.0.2:53 1 64 1 2025-11-24 06:51:02.963 00:05:08.557 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 06:55:45.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52896 1 80 1 2025-11-24 06:55:45.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51065 1 109 1 2025-11-24 06:55:45.052 00:00:00.000 UDP 28.104.0.1:52896 -> 198.28.0.2:53 1 64 1 2025-11-24 06:51:35.771 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2580 1 2025-11-24 06:55:45.052 00:00:00.000 UDP 28.104.0.1:51065 -> 198.28.0.2:53 1 64 1 2025-11-24 06:51:11.671 00:05:51.344 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 06:56:45.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53625 1 80 1 2025-11-24 06:56:45.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40412 1 109 1 2025-11-24 06:56:45.392 00:00:00.000 UDP 28.104.0.1:53625 -> 198.28.0.2:53 1 64 1 2025-11-24 06:56:45.392 00:00:00.000 UDP 28.104.0.1:40412 -> 198.28.0.2:53 1 64 1 2025-11-24 06:52:11.510 00:05:51.466 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 06:57:07.525 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 06:57:45.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51263 1 109 1 2025-11-24 06:57:45.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38073 1 80 1 2025-11-24 06:57:45.693 00:00:00.000 UDP 28.104.0.1:51263 -> 198.28.0.2:53 1 64 1 2025-11-24 06:57:45.693 00:00:00.000 UDP 28.104.0.1:38073 -> 198.28.0.2:53 1 64 1 2025-11-24 06:54:02.964 00:05:08.719 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 06:53:11.509 00:06:00.380 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-24 06:53:11.509 00:06:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-24 06:58:45.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48343 1 109 1 2025-11-24 06:58:45.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43845 1 80 1 2025-11-24 06:58:45.989 00:00:00.000 UDP 28.104.0.1:48343 -> 198.28.0.2:53 1 64 1 2025-11-24 06:58:45.989 00:00:00.000 UDP 28.104.0.1:43845 -> 198.28.0.2:53 1 64 1 Summary: total flows: 321, total bytes: 95055, total packets: 1404, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-11-24 05:57:02 - 2025-11-24 06:59:11 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0058s User: 0.0019s Wall: 0.0038s flows/second: 84784.1 Runtime: 0.0038s