Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 01:54:51.365 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2880 1 2025-11-27 01:59:08.538 00:00:00.000 UDP 28.104.0.1:52710 -> 198.28.0.2:53 1 64 1 2025-11-27 01:59:08.538 00:00:00.000 UDP 28.104.0.1:38496 -> 198.28.0.2:53 1 64 1 2025-11-27 01:59:08.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38496 1 109 1 2025-11-27 01:59:08.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52710 1 80 1 2025-11-27 02:00:14.723 00:00:00.000 UDP 28.104.0.1:41703 -> 198.28.0.2:53 1 64 1 2025-11-27 02:00:14.723 00:00:00.000 UDP 28.104.0.1:49249 -> 198.28.0.2:53 1 64 1 2025-11-27 02:00:14.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41703 1 80 1 2025-11-27 02:00:14.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49249 1 109 1 2025-11-27 01:56:12.993 00:05:51.417 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 01:57:04.460 00:05:08.683 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:01:15.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48851 1 80 1 2025-11-27 02:01:15.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44197 1 109 1 2025-11-27 02:01:15.041 00:00:00.000 UDP 28.104.0.1:48851 -> 198.28.0.2:53 1 64 1 2025-11-27 02:01:15.041 00:00:00.000 UDP 28.104.0.1:44197 -> 198.28.0.2:53 1 64 1 2025-11-27 01:57:12.984 00:05:51.437 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:02:15.349 00:00:00.000 UDP 28.104.0.1:33241 -> 198.28.0.2:53 1 64 1 2025-11-27 02:02:15.349 00:00:00.000 UDP 28.104.0.1:50590 -> 198.28.0.2:53 1 64 1 2025-11-27 01:58:04.411 00:05:08.743 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:02:15.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50590 1 109 1 2025-11-27 02:02:15.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33241 1 80 1 2025-11-27 02:03:15.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49874 1 109 1 2025-11-27 02:03:15.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52446 1 80 1 2025-11-27 02:03:15.651 00:00:00.000 UDP 28.104.0.1:49874 -> 198.28.0.2:53 1 64 1 2025-11-27 01:59:12.985 00:05:00.579 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 01:59:12.985 00:05:00.449 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:03:15.651 00:00:00.000 UDP 28.104.0.1:52446 -> 198.28.0.2:53 1 64 1 2025-11-27 02:03:28.377 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:04:15.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48409 1 109 1 2025-11-27 02:04:15.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43621 1 80 1 2025-11-27 02:04:15.942 00:00:00.000 UDP 28.104.0.1:43621 -> 198.28.0.2:53 1 64 1 2025-11-27 02:04:15.942 00:00:00.000 UDP 28.104.0.1:48409 -> 198.28.0.2:53 1 64 1 2025-11-27 02:00:11.374 00:05:10.017 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2496 1 2025-11-27 02:05:16.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41099 1 80 1 2025-11-27 02:05:16.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48203 1 109 1 2025-11-27 02:05:16.198 00:00:00.000 UDP 28.104.0.1:41099 -> 198.28.0.2:53 1 64 1 2025-11-27 02:05:16.198 00:00:00.000 UDP 28.104.0.1:48203 -> 198.28.0.2:53 1 64 1 2025-11-27 02:06:16.498 00:00:00.000 UDP 28.104.0.1:34236 -> 198.28.0.2:53 1 64 1 2025-11-27 02:06:16.498 00:00:00.000 UDP 28.104.0.1:38081 -> 198.28.0.2:53 1 64 1 2025-11-27 02:06:16.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34236 1 109 1 2025-11-27 02:06:16.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38081 1 80 1 2025-11-27 02:02:12.994 00:05:51.419 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:03:04.461 00:05:08.684 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:07:16.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33083 1 109 1 2025-11-27 02:07:16.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41960 1 80 1 2025-11-27 02:07:16.798 00:00:00.000 UDP 28.104.0.1:33083 -> 198.28.0.2:53 1 64 1 2025-11-27 02:07:16.798 00:00:00.000 UDP 28.104.0.1:41960 -> 198.28.0.2:53 1 64 1 2025-11-27 02:03:12.983 00:05:51.439 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:08:17.096 00:00:00.000 UDP 28.104.0.1:45908 -> 198.28.0.2:53 1 64 1 2025-11-27 02:08:17.096 00:00:00.000 UDP 28.104.0.1:58407 -> 198.28.0.2:53 1 64 1 2025-11-27 02:04:04.412 00:05:08.743 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:08:17.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58407 1 80 1 2025-11-27 02:08:17.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45908 1 109 1 2025-11-27 02:08:28.331 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:05:12.986 00:05:00.447 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:05:12.986 00:05:00.583 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:09:17.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40226 1 109 1 2025-11-27 02:09:17.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43501 1 80 1 2025-11-27 02:09:17.387 00:00:00.000 UDP 28.104.0.1:43501 -> 198.28.0.2:53 1 64 1 2025-11-27 02:09:17.387 00:00:00.000 UDP 28.104.0.1:40226 -> 198.28.0.2:53 1 64 1 2025-11-27 02:05:31.392 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2500 1 2025-11-27 02:10:17.636 00:00:00.000 UDP 28.104.0.1:38772 -> 198.28.0.2:53 1 64 1 2025-11-27 02:10:17.636 00:00:00.000 UDP 28.104.0.1:49255 -> 198.28.0.2:53 1 64 1 2025-11-27 02:10:17.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38772 1 80 1 2025-11-27 02:10:17.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49255 1 109 1 2025-11-27 02:11:17.946 00:00:00.000 UDP 28.104.0.1:33172 -> 198.28.0.2:53 1 64 1 2025-11-27 02:11:17.946 00:00:00.000 UDP 28.104.0.1:48765 -> 198.28.0.2:53 1 64 1 2025-11-27 02:11:17.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33172 1 109 1 2025-11-27 02:11:17.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48765 1 80 1 2025-11-27 02:12:18.290 00:00:00.000 UDP 28.104.0.1:56929 -> 198.28.0.2:53 1 64 1 2025-11-27 02:12:18.290 00:00:00.000 UDP 28.104.0.1:39930 -> 198.28.0.2:53 1 64 1 2025-11-27 02:12:18.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39930 1 80 1 2025-11-27 02:12:18.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56929 1 109 1 2025-11-27 02:08:12.997 00:05:51.416 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:09:04.462 00:05:08.684 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:13:19.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48141 1 80 1 2025-11-27 02:13:19.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34253 1 109 1 2025-11-27 02:13:19.187 00:00:00.000 UDP 28.104.0.1:48141 -> 198.28.0.2:53 1 64 1 2025-11-27 02:13:19.187 00:00:00.000 UDP 28.104.0.1:34253 -> 198.28.0.2:53 1 64 1 2025-11-27 02:13:28.593 00:00:00.015 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:09:12.987 00:05:51.436 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:10:04.412 00:05:08.744 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:14:19.482 00:00:00.000 UDP 28.104.0.1:33208 -> 198.28.0.2:53 1 64 1 2025-11-27 02:14:19.481 00:00:00.000 UDP 28.104.0.1:38021 -> 198.28.0.2:53 1 64 1 2025-11-27 02:14:19.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33208 1 109 1 2025-11-27 02:14:19.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38021 1 80 1 2025-11-27 02:10:51.402 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-27 02:11:12.987 00:05:00.583 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:11:12.987 00:05:00.451 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:15:19.784 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55680 1 109 1 2025-11-27 02:15:19.784 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39864 1 80 1 2025-11-27 02:15:19.774 00:00:00.000 UDP 28.104.0.1:55680 -> 198.28.0.2:53 1 64 1 2025-11-27 02:15:19.774 00:00:00.000 UDP 28.104.0.1:39864 -> 198.28.0.2:53 1 64 1 2025-11-27 02:16:20.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52691 1 80 1 2025-11-27 02:16:20.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52752 1 109 1 2025-11-27 02:16:20.074 00:00:00.000 UDP 28.104.0.1:52691 -> 198.28.0.2:53 1 64 1 2025-11-27 02:16:20.074 00:00:00.000 UDP 28.104.0.1:52752 -> 198.28.0.2:53 1 64 1 2025-11-27 02:17:20.373 00:00:00.000 UDP 28.104.0.1:48559 -> 198.28.0.2:53 1 64 1 2025-11-27 02:17:20.373 00:00:00.000 UDP 28.104.0.1:45791 -> 198.28.0.2:53 1 64 1 2025-11-27 02:17:20.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45791 1 80 1 2025-11-27 02:17:20.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48559 1 109 1 2025-11-27 02:14:12.998 00:05:00.001 TCP 28.151.0.1:179 -> 28.154.0.1:41239 11 667 1 2025-11-27 02:18:20.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50695 1 109 1 2025-11-27 02:18:20.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38090 1 80 1 2025-11-27 02:18:20.666 00:00:00.000 UDP 28.104.0.1:50695 -> 198.28.0.2:53 1 64 1 2025-11-27 02:18:20.666 00:00:00.000 UDP 28.104.0.1:38090 -> 198.28.0.2:53 1 64 1 2025-11-27 02:18:28.694 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:15:04.464 00:05:08.683 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:19:20.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39064 1 80 1 2025-11-27 02:19:20.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33694 1 109 1 2025-11-27 02:19:20.916 00:00:00.000 UDP 28.104.0.1:33694 -> 198.28.0.2:53 1 64 1 2025-11-27 02:19:20.916 00:00:00.000 UDP 28.104.0.1:39064 -> 198.28.0.2:53 1 64 1 2025-11-27 02:15:12.988 00:05:51.438 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:16:04.413 00:05:08.744 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:20:21.232 00:00:00.000 UDP 28.104.0.1:55687 -> 198.28.0.2:53 1 64 1 2025-11-27 02:16:11.408 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2892 1 2025-11-27 02:20:21.232 00:00:00.000 UDP 28.104.0.1:40814 -> 198.28.0.2:53 1 64 1 2025-11-27 02:20:21.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40814 1 80 1 2025-11-27 02:20:21.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55687 1 109 1 2025-11-27 02:17:12.988 00:05:00.586 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:17:12.988 00:05:00.453 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:21:21.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43035 1 80 1 2025-11-27 02:21:21.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33273 1 109 1 2025-11-27 02:21:21.501 00:00:00.000 UDP 28.104.0.1:33273 -> 198.28.0.2:53 1 64 1 2025-11-27 02:21:21.501 00:00:00.000 UDP 28.104.0.1:43035 -> 198.28.0.2:53 1 64 1 2025-11-27 02:22:21.807 00:00:00.000 UDP 28.104.0.1:43383 -> 198.28.0.2:53 1 64 1 2025-11-27 02:22:21.807 00:00:00.000 UDP 28.104.0.1:33834 -> 198.28.0.2:53 1 64 1 2025-11-27 02:22:21.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43383 1 80 1 2025-11-27 02:22:21.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33834 1 109 1 2025-11-27 02:23:22.084 00:00:00.000 UDP 28.104.0.1:60903 -> 198.28.0.2:53 1 64 1 2025-11-27 02:23:22.084 00:00:00.000 UDP 28.104.0.1:33028 -> 198.28.0.2:53 1 64 1 2025-11-27 02:23:22.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60903 1 109 1 2025-11-27 02:23:22.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33028 1 80 1 2025-11-27 02:23:29.264 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:20:04.416 00:05:08.585 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:24:22.337 00:00:00.000 UDP 28.104.0.1:44243 -> 198.28.0.2:53 1 64 1 2025-11-27 02:24:22.337 00:00:00.000 UDP 28.104.0.1:33784 -> 198.28.0.2:53 1 64 1 2025-11-27 02:24:22.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44243 1 109 1 2025-11-27 02:24:22.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33784 1 80 1 2025-11-27 02:21:04.466 00:05:08.682 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:25:22.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49689 1 80 1 2025-11-27 02:25:22.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42855 1 109 1 2025-11-27 02:25:22.589 00:00:00.000 UDP 28.104.0.1:49689 -> 198.28.0.2:53 1 64 1 2025-11-27 02:25:22.588 00:00:00.000 UDP 28.104.0.1:42855 -> 198.28.0.2:53 1 64 1 2025-11-27 02:21:31.418 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-11-27 02:21:12.989 00:05:51.438 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:22:04.416 00:05:08.742 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:26:22.893 00:00:00.000 UDP 28.104.0.1:41358 -> 198.28.0.2:53 1 64 1 2025-11-27 02:26:22.893 00:00:00.000 UDP 28.104.0.1:37126 -> 198.28.0.2:53 1 64 1 2025-11-27 02:26:22.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37126 1 109 1 2025-11-27 02:26:22.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41358 1 80 1 2025-11-27 02:23:12.990 00:05:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:23:12.991 00:05:00.585 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:27:23.285 00:00:00.000 UDP 28.104.0.1:50267 -> 198.28.0.2:53 1 64 1 2025-11-27 02:27:23.285 00:00:00.000 UDP 28.104.0.1:43940 -> 198.28.0.2:53 1 64 1 2025-11-27 02:27:23.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43940 1 80 1 2025-11-27 02:27:23.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50267 1 109 1 2025-11-27 02:28:23.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58256 1 80 1 2025-11-27 02:28:23.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45935 1 109 1 2025-11-27 02:28:23.574 00:00:00.000 UDP 28.104.0.1:45935 -> 198.28.0.2:53 1 64 1 2025-11-27 02:28:23.574 00:00:00.000 UDP 28.104.0.1:58256 -> 198.28.0.2:53 1 64 1 2025-11-27 02:28:28.723 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:29:23.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35687 1 109 1 2025-11-27 02:29:23.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50555 1 80 1 2025-11-27 02:29:23.856 00:00:00.000 UDP 28.104.0.1:50555 -> 198.28.0.2:53 1 64 1 2025-11-27 02:29:23.857 00:00:00.000 UDP 28.104.0.1:35687 -> 198.28.0.2:53 1 64 1 2025-11-27 02:26:04.417 00:05:08.585 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:30:24.151 00:00:00.000 UDP 28.104.0.1:49467 -> 198.28.0.2:53 1 64 1 2025-11-27 02:30:24.151 00:00:00.000 UDP 28.104.0.1:59499 -> 198.28.0.2:53 1 64 1 2025-11-27 02:30:24.162 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59499 1 80 1 2025-11-27 02:30:24.162 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49467 1 109 1 2025-11-27 02:26:51.420 00:05:10.844 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2688 1 2025-11-27 02:27:04.467 00:05:08.682 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:31:24.446 00:00:00.000 UDP 28.104.0.1:50505 -> 198.28.0.2:53 1 64 1 2025-11-27 02:31:24.447 00:00:00.000 UDP 28.104.0.1:48744 -> 198.28.0.2:53 1 64 1 2025-11-27 02:31:24.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48744 1 109 1 2025-11-27 02:31:24.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50505 1 80 1 2025-11-27 02:27:12.990 00:05:51.443 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:28:04.417 00:05:08.742 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:32:24.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53531 1 109 1 2025-11-27 02:32:24.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59982 1 80 1 2025-11-27 02:32:24.700 00:00:00.000 UDP 28.104.0.1:59982 -> 198.28.0.2:53 1 64 1 2025-11-27 02:32:24.700 00:00:00.000 UDP 28.104.0.1:53531 -> 198.28.0.2:53 1 64 1 2025-11-27 02:29:12.990 00:05:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:29:12.991 00:05:00.585 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:33:24.991 00:00:00.000 UDP 28.104.0.1:35909 -> 198.28.0.2:53 1 64 1 2025-11-27 02:33:24.991 00:00:00.000 UDP 28.104.0.1:51109 -> 198.28.0.2:53 1 64 1 2025-11-27 02:33:25.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35909 1 109 1 2025-11-27 02:33:25.003 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51109 1 80 1 2025-11-27 02:33:28.991 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:34:25.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53099 1 109 1 2025-11-27 02:34:25.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35597 1 80 1 2025-11-27 02:34:25.258 00:00:00.000 UDP 28.104.0.1:35597 -> 198.28.0.2:53 1 64 1 2025-11-27 02:34:25.258 00:00:00.000 UDP 28.104.0.1:53099 -> 198.28.0.2:53 1 64 1 2025-11-27 02:35:25.546 00:00:00.000 UDP 28.104.0.1:44102 -> 198.28.0.2:53 1 64 1 2025-11-27 02:35:25.546 00:00:00.000 UDP 28.104.0.1:49847 -> 198.28.0.2:53 1 64 1 2025-11-27 02:35:25.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44102 1 80 1 2025-11-27 02:35:25.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49847 1 109 1 2025-11-27 02:32:04.424 00:05:08.579 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:32:11.423 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2716 1 2025-11-27 02:36:25.839 00:00:00.000 UDP 28.104.0.1:32776 -> 198.28.0.2:53 1 64 1 2025-11-27 02:36:25.839 00:00:00.000 UDP 28.104.0.1:41023 -> 198.28.0.2:53 1 64 1 2025-11-27 02:36:25.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41023 1 80 1 2025-11-27 02:36:25.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32776 1 109 1 2025-11-27 02:33:04.474 00:05:08.675 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:37:26.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57378 1 109 1 2025-11-27 02:37:26.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38699 1 80 1 2025-11-27 02:37:26.152 00:00:00.000 UDP 28.104.0.1:57378 -> 198.28.0.2:53 1 64 1 2025-11-27 02:37:26.152 00:00:00.000 UDP 28.104.0.1:38699 -> 198.28.0.2:53 1 64 1 2025-11-27 02:33:12.992 00:05:51.447 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:34:04.426 00:05:08.735 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:38:26.404 00:00:00.000 UDP 28.104.0.1:38426 -> 198.28.0.2:53 1 64 1 2025-11-27 02:38:26.404 00:00:00.000 UDP 28.104.0.1:43674 -> 198.28.0.2:53 1 64 1 2025-11-27 02:38:26.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43674 1 109 1 2025-11-27 02:38:26.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38426 1 80 1 2025-11-27 02:38:29.175 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:35:12.992 00:05:00.585 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:35:12.992 00:05:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:39:26.702 00:00:00.000 UDP 28.104.0.1:52269 -> 198.28.0.2:53 1 64 1 2025-11-27 02:39:26.702 00:00:00.000 UDP 28.104.0.1:41926 -> 198.28.0.2:53 1 64 1 2025-11-27 02:39:26.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52269 1 80 1 2025-11-27 02:39:26.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41926 1 109 1 2025-11-27 02:40:26.949 00:00:00.000 UDP 28.104.0.1:50991 -> 198.28.0.2:53 1 64 1 2025-11-27 02:40:26.949 00:00:00.000 UDP 28.104.0.1:50414 -> 198.28.0.2:53 1 64 1 2025-11-27 02:40:26.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50991 1 109 1 2025-11-27 02:40:26.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50414 1 80 1 2025-11-27 02:41:27.249 00:00:00.000 UDP 28.104.0.1:37022 -> 198.28.0.2:53 1 64 1 2025-11-27 02:41:27.249 00:00:00.000 UDP 28.104.0.1:42805 -> 198.28.0.2:53 1 64 1 2025-11-27 02:41:27.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37022 1 80 1 2025-11-27 02:41:27.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42805 1 109 1 2025-11-27 02:37:31.426 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-27 02:38:04.429 00:05:08.577 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:42:27.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33932 1 109 1 2025-11-27 02:42:27.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38849 1 80 1 2025-11-27 02:42:27.544 00:00:00.000 UDP 28.104.0.1:38849 -> 198.28.0.2:53 1 64 1 2025-11-27 02:42:27.544 00:00:00.000 UDP 28.104.0.1:33932 -> 198.28.0.2:53 1 64 1 2025-11-27 02:39:04.479 00:05:08.672 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:43:28.911 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:43:27.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48521 1 80 1 2025-11-27 02:43:27.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50116 1 109 1 2025-11-27 02:43:27.840 00:00:00.000 UDP 28.104.0.1:50116 -> 198.28.0.2:53 1 64 1 2025-11-27 02:43:27.840 00:00:00.000 UDP 28.104.0.1:48521 -> 198.28.0.2:53 1 64 1 2025-11-27 02:39:12.992 00:05:51.449 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:40:04.429 00:05:08.733 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:44:28.127 00:00:00.000 UDP 28.104.0.1:51774 -> 198.28.0.2:53 1 64 1 2025-11-27 02:44:28.127 00:00:00.000 UDP 28.104.0.1:58011 -> 198.28.0.2:53 1 64 1 2025-11-27 02:44:28.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51774 1 80 1 2025-11-27 02:44:28.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58011 1 109 1 2025-11-27 02:41:12.994 00:05:00.585 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:41:12.994 00:05:00.454 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:45:28.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57070 1 109 1 2025-11-27 02:45:28.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49893 1 80 1 2025-11-27 02:45:28.383 00:00:00.000 UDP 28.104.0.1:49893 -> 198.28.0.2:53 1 64 1 2025-11-27 02:45:28.384 00:00:00.000 UDP 28.104.0.1:57070 -> 198.28.0.2:53 1 64 1 2025-11-27 02:46:28.655 00:00:00.000 UDP 28.104.0.1:59599 -> 198.28.0.2:53 1 64 1 2025-11-27 02:46:28.655 00:00:00.000 UDP 28.104.0.1:44283 -> 198.28.0.2:53 1 64 1 2025-11-27 02:46:28.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44283 1 80 1 2025-11-27 02:46:28.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59599 1 109 1 2025-11-27 02:42:51.431 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2468 1 2025-11-27 02:47:28.947 00:00:00.000 UDP 28.104.0.1:38354 -> 198.28.0.2:53 1 64 1 2025-11-27 02:47:28.948 00:00:00.000 UDP 28.104.0.1:55457 -> 198.28.0.2:53 1 64 1 2025-11-27 02:47:28.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38354 1 80 1 2025-11-27 02:47:28.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55457 1 109 1 2025-11-27 02:44:04.431 00:05:08.576 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:48:29.170 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:48:29.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54396 1 80 1 2025-11-27 02:48:29.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54061 1 109 1 2025-11-27 02:48:29.203 00:00:00.000 UDP 28.104.0.1:54061 -> 198.28.0.2:53 1 64 1 2025-11-27 02:48:29.203 00:00:00.000 UDP 28.104.0.1:54396 -> 198.28.0.2:53 1 64 1 2025-11-27 02:45:04.482 00:05:08.673 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:49:29.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60963 1 80 1 2025-11-27 02:49:29.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44192 1 109 1 2025-11-27 02:49:29.500 00:00:00.000 UDP 28.104.0.1:44192 -> 198.28.0.2:53 1 64 1 2025-11-27 02:49:29.500 00:00:00.000 UDP 28.104.0.1:60963 -> 198.28.0.2:53 1 64 1 2025-11-27 02:45:12.995 00:05:51.447 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:46:04.432 00:05:08.733 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:50:29.749 00:00:00.000 UDP 28.104.0.1:57585 -> 198.28.0.2:53 1 64 1 2025-11-27 02:50:29.749 00:00:00.000 UDP 28.104.0.1:50248 -> 198.28.0.2:53 1 64 1 2025-11-27 02:50:29.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57585 1 80 1 2025-11-27 02:50:29.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50248 1 109 1 2025-11-27 02:47:12.995 00:05:00.586 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:47:12.995 00:05:00.454 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:51:30.004 00:00:00.000 UDP 28.104.0.1:54820 -> 198.28.0.2:53 1 64 1 2025-11-27 02:51:30.004 00:00:00.000 UDP 28.104.0.1:58626 -> 198.28.0.2:53 1 64 1 2025-11-27 02:51:30.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58626 1 80 1 2025-11-27 02:51:30.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54820 1 109 1 2025-11-27 02:48:11.443 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2840 1 2025-11-27 02:52:30.352 00:00:00.000 UDP 28.104.0.1:44421 -> 198.28.0.2:53 1 64 1 2025-11-27 02:52:30.353 00:00:00.000 UDP 28.104.0.1:56431 -> 198.28.0.2:53 1 64 1 2025-11-27 02:52:30.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56431 1 109 1 2025-11-27 02:52:30.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44421 1 80 1 2025-11-27 02:53:30.653 00:00:00.000 UDP 28.104.0.1:37580 -> 198.28.0.2:53 1 64 1 2025-11-27 02:53:30.653 00:00:00.000 UDP 28.104.0.1:45522 -> 198.28.0.2:53 1 64 1 2025-11-27 02:53:30.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37580 1 80 1 2025-11-27 02:53:30.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45522 1 109 1 2025-11-27 02:53:29.587 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:50:04.432 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:54:30.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34660 1 80 1 2025-11-27 02:54:30.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46555 1 109 1 2025-11-27 02:54:30.948 00:00:00.000 UDP 28.104.0.1:46555 -> 198.28.0.2:53 1 64 1 2025-11-27 02:54:30.948 00:00:00.000 UDP 28.104.0.1:34660 -> 198.28.0.2:53 1 64 1 2025-11-27 02:51:04.483 00:05:08.673 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:55:31.253 00:00:00.000 UDP 28.104.0.1:55673 -> 198.28.0.2:53 1 64 1 2025-11-27 02:55:31.253 00:00:00.000 UDP 28.104.0.1:35706 -> 198.28.0.2:53 1 64 1 2025-11-27 02:55:31.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35706 1 80 1 2025-11-27 02:55:31.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55673 1 109 1 2025-11-27 02:51:12.996 00:05:51.448 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:52:04.432 00:05:08.733 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:56:31.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43557 1 80 1 2025-11-27 02:56:31.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38778 1 109 1 2025-11-27 02:56:31.572 00:00:00.000 UDP 28.104.0.1:38778 -> 198.28.0.2:53 1 64 1 2025-11-27 02:56:31.572 00:00:00.000 UDP 28.104.0.1:43557 -> 198.28.0.2:53 1 64 1 2025-11-27 02:53:12.997 00:05:00.587 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:53:12.996 00:05:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:57:31.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58869 1 80 1 2025-11-27 02:57:31.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39946 1 109 1 2025-11-27 02:57:31.863 00:00:00.000 UDP 28.104.0.1:39946 -> 198.28.0.2:53 1 64 1 2025-11-27 02:57:31.863 00:00:00.000 UDP 28.104.0.1:58869 -> 198.28.0.2:53 1 64 1 2025-11-27 02:53:31.449 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2704 1 2025-11-27 02:58:32.176 00:00:00.000 UDP 28.104.0.1:49591 -> 198.28.0.2:53 1 64 1 2025-11-27 02:58:32.176 00:00:00.000 UDP 28.104.0.1:44704 -> 198.28.0.2:53 1 64 1 2025-11-27 02:58:29.792 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:58:32.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44704 1 80 1 2025-11-27 02:58:32.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49591 1 109 1 Summary: total flows: 324, total bytes: 97413, total packets: 1433, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-11-27 01:54:51 - 2025-11-27 02:58:41 Total flows processed: 324, passed: 324, Blocks skipped: 0, Bytes read: 33760 Sys: 0.0029s User: 0.0029s Wall: 0.0027s flows/second: 118427.4 Runtime: 0.0027s