Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 04:59:03.407 00:00:00.000 UDP 28.104.0.1:50896 -> 198.28.0.2:53 1 64 1 2025-11-26 04:59:03.407 00:00:00.000 UDP 28.104.0.1:58576 -> 198.28.0.2:53 1 64 1 2025-11-26 04:59:03.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58576 1 80 1 2025-11-26 04:59:03.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50896 1 109 1 2025-11-26 05:00:03.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58349 1 109 1 2025-11-26 05:00:03.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53658 1 80 1 2025-11-26 05:00:03.705 00:00:00.000 UDP 28.104.0.1:58349 -> 198.28.0.2:53 1 64 1 2025-11-26 05:00:03.705 00:00:00.000 UDP 28.104.0.1:53658 -> 198.28.0.2:53 1 64 1 2025-11-26 05:01:03.991 00:00:00.000 UDP 28.104.0.1:34195 -> 198.28.0.2:53 1 64 1 2025-11-26 05:01:03.991 00:00:00.000 UDP 28.104.0.1:34725 -> 198.28.0.2:53 1 64 1 2025-11-26 04:56:12.614 00:05:51.442 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:01:04.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34725 1 80 1 2025-11-26 05:01:04.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34195 1 109 1 2025-11-26 04:57:19.691 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2800 1 2025-11-26 05:02:04.381 00:00:00.000 UDP 28.104.0.1:59458 -> 198.28.0.2:53 1 64 1 2025-11-26 04:57:12.605 00:05:51.461 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:02:04.381 00:00:00.000 UDP 28.104.0.1:53765 -> 198.28.0.2:53 1 64 1 2025-11-26 04:57:12.700 00:05:51.406 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:02:04.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53765 1 80 1 2025-11-26 05:02:04.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59458 1 109 1 2025-11-26 05:03:02.933 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 04:58:12.712 00:05:51.345 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:03:04.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55722 1 80 1 2025-11-26 05:03:04.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48634 1 109 1 2025-11-26 05:03:04.666 00:00:00.000 UDP 28.104.0.1:55722 -> 198.28.0.2:53 1 64 1 2025-11-26 05:03:04.666 00:00:00.000 UDP 28.104.0.1:48634 -> 198.28.0.2:53 1 64 1 2025-11-26 04:59:12.606 00:05:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:04:04.957 00:00:00.000 UDP 28.104.0.1:34442 -> 198.28.0.2:53 1 64 1 2025-11-26 05:04:04.956 00:00:00.000 UDP 28.104.0.1:33483 -> 198.28.0.2:53 1 64 1 2025-11-26 05:04:04.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33483 1 80 1 2025-11-26 05:04:04.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34442 1 109 1 2025-11-26 05:05:05.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37260 1 109 1 2025-11-26 05:05:05.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47896 1 80 1 2025-11-26 05:05:05.264 00:00:00.000 UDP 28.104.0.1:47896 -> 198.28.0.2:53 1 64 1 2025-11-26 05:05:05.264 00:00:00.000 UDP 28.104.0.1:37260 -> 198.28.0.2:53 1 64 1 2025-11-26 05:00:12.606 00:06:00.271 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:06:05.556 00:00:00.000 UDP 28.104.0.1:60198 -> 198.28.0.2:53 1 64 1 2025-11-26 05:06:05.557 00:00:00.000 UDP 28.104.0.1:49054 -> 198.28.0.2:53 1 64 1 2025-11-26 05:06:05.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60198 1 80 1 2025-11-26 05:06:05.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49054 1 109 1 2025-11-26 05:02:39.701 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-26 05:02:12.618 00:05:51.439 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:07:05.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53255 1 109 1 2025-11-26 05:07:05.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49293 1 80 1 2025-11-26 05:07:05.806 00:00:00.000 UDP 28.104.0.1:53255 -> 198.28.0.2:53 1 64 1 2025-11-26 05:07:05.806 00:00:00.000 UDP 28.104.0.1:49293 -> 198.28.0.2:53 1 64 1 2025-11-26 05:08:03.198 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:08:06.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33089 1 80 1 2025-11-26 05:08:06.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54705 1 109 1 2025-11-26 05:03:12.606 00:05:51.461 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:03:12.701 00:05:51.406 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:08:06.078 00:00:00.000 UDP 28.104.0.1:33089 -> 198.28.0.2:53 1 64 1 2025-11-26 05:08:06.078 00:00:00.000 UDP 28.104.0.1:54705 -> 198.28.0.2:53 1 64 1 2025-11-26 05:09:06.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37912 1 80 1 2025-11-26 05:04:12.713 00:05:51.348 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:09:06.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48150 1 109 1 2025-11-26 05:09:06.368 00:00:00.000 UDP 28.104.0.1:37912 -> 198.28.0.2:53 1 64 1 2025-11-26 05:09:06.368 00:00:00.000 UDP 28.104.0.1:48150 -> 198.28.0.2:53 1 64 1 2025-11-26 05:05:12.608 00:05:00.409 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:10:06.625 00:00:00.000 UDP 28.104.0.1:53415 -> 198.28.0.2:53 1 64 1 2025-11-26 05:10:06.625 00:00:00.000 UDP 28.104.0.1:51614 -> 198.28.0.2:53 1 64 1 2025-11-26 05:10:06.637 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53415 1 109 1 2025-11-26 05:10:06.637 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51614 1 80 1 2025-11-26 05:11:06.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38267 1 80 1 2025-11-26 05:11:06.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46193 1 109 1 2025-11-26 05:11:06.923 00:00:00.000 UDP 28.104.0.1:46193 -> 198.28.0.2:53 1 64 1 2025-11-26 05:11:06.923 00:00:00.000 UDP 28.104.0.1:38267 -> 198.28.0.2:53 1 64 1 2025-11-26 05:12:07.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50611 1 80 1 2025-11-26 05:12:07.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43822 1 109 1 2025-11-26 05:12:07.234 00:00:00.000 UDP 28.104.0.1:43822 -> 198.28.0.2:53 1 64 1 2025-11-26 05:12:07.235 00:00:00.000 UDP 28.104.0.1:50611 -> 198.28.0.2:53 1 64 1 2025-11-26 05:07:12.611 00:06:00.271 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:07:59.706 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2564 1 2025-11-26 05:13:02.954 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:13:07.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39247 1 109 1 2025-11-26 05:13:07.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44039 1 80 1 2025-11-26 05:08:12.620 00:05:51.442 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:13:07.529 00:00:00.000 UDP 28.104.0.1:44039 -> 198.28.0.2:53 1 64 1 2025-11-26 05:13:07.529 00:00:00.000 UDP 28.104.0.1:39247 -> 198.28.0.2:53 1 64 1 2025-11-26 05:14:07.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59805 1 80 1 2025-11-26 05:14:07.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60509 1 109 1 2025-11-26 05:14:07.846 00:00:00.000 UDP 28.104.0.1:59805 -> 198.28.0.2:53 1 64 1 2025-11-26 05:09:12.609 00:05:51.462 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:09:12.702 00:05:51.409 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:14:07.846 00:00:00.000 UDP 28.104.0.1:60509 -> 198.28.0.2:53 1 64 1 2025-11-26 05:15:08.107 00:00:00.000 UDP 28.104.0.1:57453 -> 198.28.0.2:53 1 64 1 2025-11-26 05:15:08.107 00:00:00.000 UDP 28.104.0.1:51547 -> 198.28.0.2:53 1 64 1 2025-11-26 05:15:08.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57453 1 80 1 2025-11-26 05:10:12.713 00:05:51.349 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:15:08.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51547 1 109 1 2025-11-26 05:11:12.610 00:05:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:16:08.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53285 1 109 1 2025-11-26 05:16:08.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50945 1 80 1 2025-11-26 05:16:08.403 00:00:00.000 UDP 28.104.0.1:50945 -> 198.28.0.2:53 1 64 1 2025-11-26 05:16:08.403 00:00:00.000 UDP 28.104.0.1:53285 -> 198.28.0.2:53 1 64 1 2025-11-26 05:17:08.658 00:00:00.000 UDP 28.104.0.1:54624 -> 198.28.0.2:53 1 64 1 2025-11-26 05:17:08.658 00:00:00.000 UDP 28.104.0.1:38358 -> 198.28.0.2:53 1 64 1 2025-11-26 05:17:08.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54624 1 109 1 2025-11-26 05:17:08.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38358 1 80 1 2025-11-26 05:13:19.710 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2452 1 2025-11-26 05:18:03.520 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:18:08.953 00:00:00.000 UDP 28.104.0.1:57384 -> 198.28.0.2:53 1 64 1 2025-11-26 05:18:08.953 00:00:00.000 UDP 28.104.0.1:50967 -> 198.28.0.2:53 1 64 1 2025-11-26 05:18:08.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57384 1 80 1 2025-11-26 05:18:08.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50967 1 109 1 2025-11-26 05:14:12.621 00:05:51.443 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:19:09.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58156 1 109 1 2025-11-26 05:19:09.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54768 1 80 1 2025-11-26 05:19:09.246 00:00:00.000 UDP 28.104.0.1:54768 -> 198.28.0.2:53 1 64 1 2025-11-26 05:14:12.611 00:06:00.269 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:19:09.246 00:00:00.000 UDP 28.104.0.1:58156 -> 198.28.0.2:53 1 64 1 2025-11-26 05:15:12.610 00:05:51.464 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:15:12.714 00:05:51.400 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:20:09.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59723 1 80 1 2025-11-26 05:20:09.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48684 1 109 1 2025-11-26 05:20:09.542 00:00:00.000 UDP 28.104.0.1:59723 -> 198.28.0.2:53 1 64 1 2025-11-26 05:20:09.542 00:00:00.000 UDP 28.104.0.1:48684 -> 198.28.0.2:53 1 64 1 2025-11-26 05:16:12.725 00:05:51.339 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:21:09.835 00:00:00.000 UDP 28.104.0.1:36333 -> 198.28.0.2:53 1 64 1 2025-11-26 05:17:12.614 00:05:00.406 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:21:09.835 00:00:00.000 UDP 28.104.0.1:44697 -> 198.28.0.2:53 1 64 1 2025-11-26 05:21:09.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44697 1 80 1 2025-11-26 05:21:09.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36333 1 109 1 2025-11-26 05:22:10.125 00:00:00.000 UDP 28.104.0.1:40438 -> 198.28.0.2:53 1 64 1 2025-11-26 05:22:10.124 00:00:00.000 UDP 28.104.0.1:45669 -> 198.28.0.2:53 1 64 1 2025-11-26 05:22:10.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40438 1 109 1 2025-11-26 05:22:10.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45669 1 80 1 2025-11-26 05:18:39.714 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2824 1 2025-11-26 05:23:03.384 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:23:10.416 00:00:00.000 UDP 28.104.0.1:35233 -> 198.28.0.2:53 1 64 1 2025-11-26 05:23:10.416 00:00:00.000 UDP 28.104.0.1:35531 -> 198.28.0.2:53 1 64 1 2025-11-26 05:23:10.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35233 1 80 1 2025-11-26 05:23:10.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35531 1 109 1 2025-11-26 05:24:10.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40146 1 80 1 2025-11-26 05:24:10.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45491 1 109 1 2025-11-26 05:24:10.711 00:00:00.000 UDP 28.104.0.1:40146 -> 198.28.0.2:53 1 64 1 2025-11-26 05:24:10.711 00:00:00.000 UDP 28.104.0.1:45491 -> 198.28.0.2:53 1 64 1 2025-11-26 05:25:11.043 00:00:00.000 UDP 28.104.0.1:60397 -> 198.28.0.2:53 1 64 1 2025-11-26 05:25:11.043 00:00:00.000 UDP 28.104.0.1:59844 -> 198.28.0.2:53 1 64 1 2025-11-26 05:20:12.624 00:05:51.439 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:25:11.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60397 1 80 1 2025-11-26 05:25:11.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59844 1 109 1 2025-11-26 05:21:12.615 00:05:51.459 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:21:12.717 00:05:51.398 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:26:11.341 00:00:00.000 UDP 28.104.0.1:40727 -> 198.28.0.2:53 1 64 1 2025-11-26 05:26:11.341 00:00:00.000 UDP 28.104.0.1:53150 -> 198.28.0.2:53 1 64 1 2025-11-26 05:21:12.614 00:06:00.266 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:26:11.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53150 1 80 1 2025-11-26 05:26:11.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40727 1 109 1 2025-11-26 05:22:12.728 00:05:51.337 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:23:12.614 00:05:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:27:11.642 00:00:00.000 UDP 28.104.0.1:45634 -> 198.28.0.2:53 1 64 1 2025-11-26 05:27:11.642 00:00:00.000 UDP 28.104.0.1:52915 -> 198.28.0.2:53 1 64 1 2025-11-26 05:27:11.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45634 1 80 1 2025-11-26 05:27:11.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52915 1 109 1 2025-11-26 05:28:03.568 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:28:11.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35447 1 80 1 2025-11-26 05:28:11.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52019 1 109 1 2025-11-26 05:28:11.936 00:00:00.000 UDP 28.104.0.1:35447 -> 198.28.0.2:53 1 64 1 2025-11-26 05:28:11.936 00:00:00.000 UDP 28.104.0.1:52019 -> 198.28.0.2:53 1 64 1 2025-11-26 05:23:59.716 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-26 05:29:12.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43101 1 80 1 2025-11-26 05:29:12.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50432 1 109 1 2025-11-26 05:29:12.233 00:00:00.000 UDP 28.104.0.1:43101 -> 198.28.0.2:53 1 64 1 2025-11-26 05:29:12.234 00:00:00.000 UDP 28.104.0.1:50432 -> 198.28.0.2:53 1 64 1 2025-11-26 05:30:12.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37744 1 109 1 2025-11-26 05:30:12.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38968 1 80 1 2025-11-26 05:30:12.524 00:00:00.000 UDP 28.104.0.1:38968 -> 198.28.0.2:53 1 64 1 2025-11-26 05:30:12.524 00:00:00.000 UDP 28.104.0.1:37744 -> 198.28.0.2:53 1 64 1 2025-11-26 05:26:12.626 00:05:51.440 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:31:12.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43682 1 109 1 2025-11-26 05:31:12.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53591 1 80 1 2025-11-26 05:31:12.822 00:00:00.000 UDP 28.104.0.1:53591 -> 198.28.0.2:53 1 64 1 2025-11-26 05:31:12.822 00:00:00.000 UDP 28.104.0.1:43682 -> 198.28.0.2:53 1 64 1 2025-11-26 05:27:12.615 00:05:51.460 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:27:12.718 00:05:51.397 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:32:13.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46997 1 80 1 2025-11-26 05:32:13.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45287 1 109 1 2025-11-26 05:32:13.115 00:00:00.000 UDP 28.104.0.1:45287 -> 198.28.0.2:53 1 64 1 2025-11-26 05:32:13.115 00:00:00.000 UDP 28.104.0.1:46997 -> 198.28.0.2:53 1 64 1 2025-11-26 05:33:03.865 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:28:12.730 00:05:51.336 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:33:13.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53317 1 109 1 2025-11-26 05:33:13.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45222 1 80 1 2025-11-26 05:29:12.615 00:05:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:33:13.407 00:00:00.000 UDP 28.104.0.1:45222 -> 198.28.0.2:53 1 64 1 2025-11-26 05:33:13.407 00:00:00.000 UDP 28.104.0.1:53317 -> 198.28.0.2:53 1 64 1 2025-11-26 05:28:12.615 00:06:00.266 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:29:19.721 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2680 1 2025-11-26 05:34:13.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49116 1 80 1 2025-11-26 05:34:13.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35098 1 109 1 2025-11-26 05:34:13.699 00:00:00.000 UDP 28.104.0.1:49116 -> 198.28.0.2:53 1 64 1 2025-11-26 05:34:13.699 00:00:00.000 UDP 28.104.0.1:35098 -> 198.28.0.2:53 1 64 1 2025-11-26 05:35:14.110 00:00:00.000 UDP 28.104.0.1:45448 -> 198.28.0.2:53 1 64 1 2025-11-26 05:35:14.110 00:00:00.000 UDP 28.104.0.1:34485 -> 198.28.0.2:53 1 64 1 2025-11-26 05:35:14.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34485 1 109 1 2025-11-26 05:35:14.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45448 1 80 1 2025-11-26 05:36:14.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59521 1 80 1 2025-11-26 05:36:14.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50638 1 109 1 2025-11-26 05:36:14.402 00:00:00.000 UDP 28.104.0.1:59521 -> 198.28.0.2:53 1 64 1 2025-11-26 05:36:14.402 00:00:00.000 UDP 28.104.0.1:50638 -> 198.28.0.2:53 1 64 1 2025-11-26 05:32:12.626 00:05:51.441 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:37:14.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40092 1 109 1 2025-11-26 05:37:14.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46136 1 80 1 2025-11-26 05:37:14.655 00:00:00.000 UDP 28.104.0.1:40092 -> 198.28.0.2:53 1 64 1 2025-11-26 05:37:14.655 00:00:00.000 UDP 28.104.0.1:46136 -> 198.28.0.2:53 1 64 1 2025-11-26 05:38:03.657 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:33:12.721 00:05:51.397 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:33:12.617 00:05:51.461 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:38:16.090 00:00:00.000 UDP 28.104.0.1:38794 -> 198.28.0.2:53 1 64 1 2025-11-26 05:38:16.090 00:00:00.000 UDP 28.104.0.1:57865 -> 198.28.0.2:53 1 64 1 2025-11-26 05:38:16.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57865 1 80 1 2025-11-26 05:38:16.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38794 1 109 1 2025-11-26 05:34:39.729 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2620 1 2025-11-26 05:34:12.733 00:05:51.335 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:39:16.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60594 1 109 1 2025-11-26 05:39:16.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40066 1 80 1 2025-11-26 05:35:12.617 00:05:00.409 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:39:16.383 00:00:00.000 UDP 28.104.0.1:60594 -> 198.28.0.2:53 1 64 1 2025-11-26 05:39:16.383 00:00:00.000 UDP 28.104.0.1:40066 -> 198.28.0.2:53 1 64 1 2025-11-26 05:35:12.617 00:06:00.268 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:40:16.680 00:00:00.000 UDP 28.104.0.1:60105 -> 198.28.0.2:53 1 64 1 2025-11-26 05:40:16.680 00:00:00.000 UDP 28.104.0.1:52482 -> 198.28.0.2:53 1 64 1 2025-11-26 05:40:16.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60105 1 109 1 2025-11-26 05:40:16.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52482 1 80 1 2025-11-26 05:41:16.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57972 1 80 1 2025-11-26 05:41:16.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38817 1 109 1 2025-11-26 05:41:16.975 00:00:00.000 UDP 28.104.0.1:57972 -> 198.28.0.2:53 1 64 1 2025-11-26 05:41:16.975 00:00:00.000 UDP 28.104.0.1:38817 -> 198.28.0.2:53 1 64 1 2025-11-26 05:42:17.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43580 1 80 1 2025-11-26 05:42:17.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45985 1 109 1 2025-11-26 05:42:17.271 00:00:00.000 UDP 28.104.0.1:45985 -> 198.28.0.2:53 1 64 1 2025-11-26 05:42:17.271 00:00:00.000 UDP 28.104.0.1:43580 -> 198.28.0.2:53 1 64 1 2025-11-26 05:43:03.806 00:00:00.028 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:38:12.631 00:05:51.438 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:43:17.574 00:00:00.000 UDP 28.104.0.1:37986 -> 198.28.0.2:53 1 64 1 2025-11-26 05:43:17.574 00:00:00.000 UDP 28.104.0.1:50542 -> 198.28.0.2:53 1 64 1 2025-11-26 05:43:17.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37986 1 109 1 2025-11-26 05:43:17.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50542 1 80 1 2025-11-26 05:39:12.726 00:05:51.393 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:39:12.619 00:05:51.460 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:39:59.734 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-26 05:44:17.872 00:00:00.000 UDP 28.104.0.1:58358 -> 198.28.0.2:53 1 64 1 2025-11-26 05:44:17.873 00:00:00.000 UDP 28.104.0.1:52258 -> 198.28.0.2:53 1 64 1 2025-11-26 05:44:17.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58358 1 109 1 2025-11-26 05:44:17.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52258 1 80 1 2025-11-26 05:40:12.736 00:05:51.332 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:41:12.620 00:05:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:45:18.183 00:00:00.000 UDP 28.104.0.1:59393 -> 198.28.0.2:53 1 64 1 2025-11-26 05:45:18.183 00:00:00.000 UDP 28.104.0.1:33751 -> 198.28.0.2:53 1 64 1 2025-11-26 05:45:18.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59393 1 80 1 2025-11-26 05:45:18.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33751 1 109 1 2025-11-26 05:46:18.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35698 1 109 1 2025-11-26 05:46:18.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33639 1 80 1 2025-11-26 05:46:18.480 00:00:00.000 UDP 28.104.0.1:35698 -> 198.28.0.2:53 1 64 1 2025-11-26 05:46:18.480 00:00:00.000 UDP 28.104.0.1:33639 -> 198.28.0.2:53 1 64 1 2025-11-26 05:42:12.621 00:06:00.269 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:47:18.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58161 1 109 1 2025-11-26 05:47:18.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56511 1 80 1 2025-11-26 05:47:18.763 00:00:00.000 UDP 28.104.0.1:56511 -> 198.28.0.2:53 1 64 1 2025-11-26 05:47:18.763 00:00:00.000 UDP 28.104.0.1:58161 -> 198.28.0.2:53 1 64 1 2025-11-26 05:48:04.495 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:48:19.075 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42337 1 109 1 2025-11-26 05:48:19.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48019 1 80 1 2025-11-26 05:48:19.065 00:00:00.000 UDP 28.104.0.1:42337 -> 198.28.0.2:53 1 64 1 2025-11-26 05:48:19.066 00:00:00.000 UDP 28.104.0.1:48019 -> 198.28.0.2:53 1 64 1 2025-11-26 05:44:12.630 00:05:51.440 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:49:19.358 00:00:00.000 UDP 28.104.0.1:41318 -> 198.28.0.2:53 1 64 1 2025-11-26 05:49:19.358 00:00:00.000 UDP 28.104.0.1:59693 -> 198.28.0.2:53 1 64 1 2025-11-26 05:49:19.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41318 1 80 1 2025-11-26 05:49:19.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59693 1 109 1 2025-11-26 05:45:19.746 00:05:10.240 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2772 1 2025-11-26 05:45:12.621 00:05:51.459 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:45:12.728 00:05:51.392 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:50:19.646 00:00:00.000 UDP 28.104.0.1:42205 -> 198.28.0.2:53 1 64 1 2025-11-26 05:50:19.646 00:00:00.000 UDP 28.104.0.1:60863 -> 198.28.0.2:53 1 64 1 2025-11-26 05:50:19.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60863 1 109 1 2025-11-26 05:50:19.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42205 1 80 1 2025-11-26 05:46:12.738 00:05:51.332 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:47:12.622 00:05:00.405 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:51:19.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38503 1 109 1 2025-11-26 05:51:19.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55814 1 80 1 2025-11-26 05:51:19.939 00:00:00.000 UDP 28.104.0.1:38503 -> 198.28.0.2:53 1 64 1 2025-11-26 05:51:19.939 00:00:00.000 UDP 28.104.0.1:55814 -> 198.28.0.2:53 1 64 1 2025-11-26 05:52:20.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53623 1 109 1 2025-11-26 05:52:20.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59721 1 80 1 2025-11-26 05:52:20.243 00:00:00.000 UDP 28.104.0.1:59721 -> 198.28.0.2:53 1 64 1 2025-11-26 05:52:20.243 00:00:00.000 UDP 28.104.0.1:53623 -> 198.28.0.2:53 1 64 1 2025-11-26 05:53:04.150 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:53:20.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52369 1 80 1 2025-11-26 05:53:20.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58715 1 109 1 2025-11-26 05:53:20.533 00:00:00.000 UDP 28.104.0.1:52369 -> 198.28.0.2:53 1 64 1 2025-11-26 05:53:20.533 00:00:00.000 UDP 28.104.0.1:58715 -> 198.28.0.2:53 1 64 1 2025-11-26 05:49:12.622 00:06:00.269 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:54:20.787 00:00:00.000 UDP 28.104.0.1:55960 -> 198.28.0.2:53 1 64 1 2025-11-26 05:54:20.788 00:00:00.000 UDP 28.104.0.1:53434 -> 198.28.0.2:53 1 64 1 2025-11-26 05:54:20.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53434 1 109 1 2025-11-26 05:54:20.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55960 1 80 1 2025-11-26 05:50:39.755 00:05:10.018 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-11-26 05:50:12.635 00:05:51.436 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:55:21.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54794 1 80 1 2025-11-26 05:55:21.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40989 1 109 1 2025-11-26 05:55:21.105 00:00:00.000 UDP 28.104.0.1:54794 -> 198.28.0.2:53 1 64 1 2025-11-26 05:55:21.104 00:00:00.000 UDP 28.104.0.1:40989 -> 198.28.0.2:53 1 64 1 2025-11-26 05:51:12.729 00:05:51.393 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:51:12.626 00:05:51.456 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:56:21.393 00:00:00.000 UDP 28.104.0.1:55044 -> 198.28.0.2:53 1 64 1 2025-11-26 05:56:21.393 00:00:00.000 UDP 28.104.0.1:34512 -> 198.28.0.2:53 1 64 1 2025-11-26 05:56:21.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34512 1 109 1 2025-11-26 05:56:21.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55044 1 80 1 2025-11-26 05:52:12.738 00:05:51.333 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:53:12.626 00:05:00.403 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:57:21.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38804 1 109 1 2025-11-26 05:57:21.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56922 1 80 1 2025-11-26 05:57:21.692 00:00:00.000 UDP 28.104.0.1:56922 -> 198.28.0.2:53 1 64 1 2025-11-26 05:57:21.692 00:00:00.000 UDP 28.104.0.1:38804 -> 198.28.0.2:53 1 64 1 2025-11-26 05:58:04.090 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:58:21.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48117 1 109 1 2025-11-26 05:58:21.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57670 1 80 1 2025-11-26 05:58:21.980 00:00:00.000 UDP 28.104.0.1:57670 -> 198.28.0.2:53 1 64 1 2025-11-26 05:58:21.981 00:00:00.000 UDP 28.104.0.1:48117 -> 198.28.0.2:53 1 64 1 Summary: total flows: 321, total bytes: 94176, total packets: 1387, avg bps: 202, avg pps: 0, avg bpp: 67 Time window: 2025-11-26 04:56:12 - 2025-11-26 05:58:21 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0032s User: 0.0032s Wall: 0.0040s flows/second: 79572.8 Runtime: 0.0041s