Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 02:59:32.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51796 1 109 1 2025-11-27 02:59:32.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54977 1 80 1 2025-11-27 02:59:32.471 00:00:00.000 UDP 28.104.0.1:51796 -> 198.28.0.2:53 1 64 1 2025-11-27 02:59:32.471 00:00:00.000 UDP 28.104.0.1:54977 -> 198.28.0.2:53 1 64 1 2025-11-27 02:56:04.433 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:00:33.056 00:00:00.000 UDP 28.104.0.1:40185 -> 198.28.0.2:53 1 64 1 2025-11-27 03:00:33.056 00:00:00.000 UDP 28.104.0.1:48228 -> 198.28.0.2:53 1 64 1 2025-11-27 03:00:33.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48228 1 80 1 2025-11-27 03:00:33.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40185 1 109 1 2025-11-27 02:57:04.484 00:05:08.675 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:01:33.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43977 1 80 1 2025-11-27 03:01:33.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33406 1 109 1 2025-11-27 03:01:33.363 00:00:00.000 UDP 28.104.0.1:43977 -> 198.28.0.2:53 1 64 1 2025-11-27 03:01:33.363 00:00:00.000 UDP 28.104.0.1:33406 -> 198.28.0.2:53 1 64 1 2025-11-27 02:57:12.996 00:05:51.447 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:58:04.433 00:05:08.735 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:02:33.625 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50476 1 80 1 2025-11-27 03:02:33.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36232 1 109 1 2025-11-27 03:02:33.613 00:00:00.000 UDP 28.104.0.1:50476 -> 198.28.0.2:53 1 64 1 2025-11-27 03:02:33.614 00:00:00.000 UDP 28.104.0.1:36232 -> 198.28.0.2:53 1 64 1 2025-11-27 02:58:51.461 00:05:10.014 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2700 1 2025-11-27 02:59:12.997 00:05:00.587 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:59:12.997 00:05:00.458 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 03:03:33.916 00:00:00.000 UDP 28.104.0.1:40728 -> 198.28.0.2:53 1 64 1 2025-11-27 03:03:33.916 00:00:00.000 UDP 28.104.0.1:54634 -> 198.28.0.2:53 1 64 1 2025-11-27 03:03:29.509 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:03:33.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40728 1 80 1 2025-11-27 03:03:33.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54634 1 109 1 2025-11-27 03:04:34.227 00:00:00.000 UDP 28.104.0.1:42336 -> 198.28.0.2:53 1 64 1 2025-11-27 03:04:34.227 00:00:00.000 UDP 28.104.0.1:42450 -> 198.28.0.2:53 1 64 1 2025-11-27 03:04:34.239 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42450 1 80 1 2025-11-27 03:04:34.239 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42336 1 109 1 2025-11-27 03:05:34.522 00:00:00.000 UDP 28.104.0.1:47692 -> 198.28.0.2:53 1 64 1 2025-11-27 03:05:34.522 00:00:00.000 UDP 28.104.0.1:35097 -> 198.28.0.2:53 1 64 1 2025-11-27 03:05:34.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35097 1 109 1 2025-11-27 03:05:34.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47692 1 80 1 2025-11-27 03:02:04.433 00:05:08.577 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:06:34.815 00:00:00.000 UDP 28.104.0.1:54222 -> 198.28.0.2:53 1 64 1 2025-11-27 03:06:34.814 00:00:00.000 UDP 28.104.0.1:56482 -> 198.28.0.2:53 1 64 1 2025-11-27 03:06:34.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54222 1 109 1 2025-11-27 03:06:34.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56482 1 80 1 2025-11-27 03:03:12.998 00:05:00.003 TCP 28.154.0.1:41239 -> 28.151.0.1:179 11 686 1 2025-11-27 03:03:04.484 00:05:08.678 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:07:35.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41313 1 109 1 2025-11-27 03:07:35.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49684 1 80 1 2025-11-27 03:07:35.110 00:00:00.000 UDP 28.104.0.1:49684 -> 198.28.0.2:53 1 64 1 2025-11-27 03:07:35.110 00:00:00.000 UDP 28.104.0.1:41313 -> 198.28.0.2:53 1 64 1 2025-11-27 03:04:04.434 00:05:08.737 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:04:11.467 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 03:08:29.558 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:08:35.406 00:00:00.000 UDP 28.104.0.1:42957 -> 198.28.0.2:53 1 64 1 2025-11-27 03:08:35.406 00:00:00.000 UDP 28.104.0.1:57289 -> 198.28.0.2:53 1 64 1 2025-11-27 03:08:35.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57289 1 80 1 2025-11-27 03:08:35.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42957 1 109 1 2025-11-27 03:09:35.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54364 1 109 1 2025-11-27 03:09:35.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55843 1 80 1 2025-11-27 03:09:35.710 00:00:00.000 UDP 28.104.0.1:55843 -> 198.28.0.2:53 1 64 1 2025-11-27 03:09:35.710 00:00:00.000 UDP 28.104.0.1:54364 -> 198.28.0.2:53 1 64 1 2025-11-27 03:05:13.002 00:06:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 809 1 2025-11-27 03:05:13.002 00:06:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 03:10:36.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34648 1 109 1 2025-11-27 03:10:36.011 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38039 1 80 1 2025-11-27 03:10:36.000 00:00:00.000 UDP 28.104.0.1:34648 -> 198.28.0.2:53 1 64 1 2025-11-27 03:10:36.000 00:00:00.000 UDP 28.104.0.1:38039 -> 198.28.0.2:53 1 64 1 2025-11-27 03:11:36.295 00:00:00.000 UDP 28.104.0.1:60555 -> 198.28.0.2:53 1 64 1 2025-11-27 03:11:36.295 00:00:00.000 UDP 28.104.0.1:53405 -> 198.28.0.2:53 1 64 1 2025-11-27 03:11:36.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60555 1 80 1 2025-11-27 03:11:36.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53405 1 109 1 2025-11-27 03:08:04.435 00:05:08.578 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:12:36.549 00:00:00.000 UDP 28.104.0.1:41371 -> 198.28.0.2:53 1 64 1 2025-11-27 03:12:36.549 00:00:00.000 UDP 28.104.0.1:52359 -> 198.28.0.2:53 1 64 1 2025-11-27 03:12:36.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41371 1 109 1 2025-11-27 03:12:36.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52359 1 80 1 2025-11-27 03:09:04.444 00:05:08.557 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:09:04.484 00:05:08.677 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:13:29.698 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:13:36.848 00:00:00.000 UDP 28.104.0.1:40638 -> 198.28.0.2:53 1 64 1 2025-11-27 03:13:36.848 00:00:00.000 UDP 28.104.0.1:50626 -> 198.28.0.2:53 1 64 1 2025-11-27 03:13:36.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50626 1 109 1 2025-11-27 03:13:36.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40638 1 80 1 2025-11-27 03:09:31.473 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2388 1 2025-11-27 03:10:04.436 00:05:08.739 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:14:37.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36372 1 80 1 2025-11-27 03:14:37.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58723 1 109 1 2025-11-27 03:14:37.110 00:00:00.000 UDP 28.104.0.1:36372 -> 198.28.0.2:53 1 64 1 2025-11-27 03:14:37.110 00:00:00.000 UDP 28.104.0.1:58723 -> 198.28.0.2:53 1 64 1 2025-11-27 03:15:37.403 00:00:00.000 UDP 28.104.0.1:41590 -> 198.28.0.2:53 1 64 1 2025-11-27 03:15:37.402 00:00:00.000 UDP 28.104.0.1:33149 -> 198.28.0.2:53 1 64 1 2025-11-27 03:15:37.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41590 1 80 1 2025-11-27 03:15:37.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33149 1 109 1 2025-11-27 03:11:13.586 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 790 1 2025-11-27 03:16:37.698 00:00:00.000 UDP 28.104.0.1:55245 -> 198.28.0.2:53 1 64 1 2025-11-27 03:16:37.698 00:00:00.000 UDP 28.104.0.1:54040 -> 198.28.0.2:53 1 64 1 2025-11-27 03:16:37.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55245 1 109 1 2025-11-27 03:16:37.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54040 1 80 1 2025-11-27 03:12:13.002 00:06:00.002 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 809 1 2025-11-27 03:17:37.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41103 1 80 1 2025-11-27 03:17:37.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32831 1 109 1 2025-11-27 03:17:37.948 00:00:00.000 UDP 28.104.0.1:32831 -> 198.28.0.2:53 1 64 1 2025-11-27 03:17:37.949 00:00:00.000 UDP 28.104.0.1:41103 -> 198.28.0.2:53 1 64 1 2025-11-27 03:14:04.438 00:05:08.576 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:18:38.202 00:00:00.000 UDP 28.104.0.1:50066 -> 198.28.0.2:53 1 64 1 2025-11-27 03:18:38.201 00:00:00.000 UDP 28.104.0.1:35657 -> 198.28.0.2:53 1 64 1 2025-11-27 03:18:29.833 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:18:38.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35657 1 80 1 2025-11-27 03:18:38.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50066 1 109 1 2025-11-27 03:14:51.478 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2760 1 2025-11-27 03:15:04.448 00:05:08.556 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:15:04.489 00:05:08.708 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:19:38.496 00:00:00.000 UDP 28.104.0.1:38600 -> 198.28.0.2:53 1 64 1 2025-11-27 03:19:38.497 00:00:00.000 UDP 28.104.0.1:37954 -> 198.28.0.2:53 1 64 1 2025-11-27 03:19:38.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37954 1 80 1 2025-11-27 03:19:38.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38600 1 109 1 2025-11-27 03:16:04.438 00:05:08.767 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:20:38.754 00:00:00.000 UDP 28.104.0.1:54153 -> 198.28.0.2:53 1 64 1 2025-11-27 03:20:38.755 00:00:00.000 UDP 28.104.0.1:54456 -> 198.28.0.2:53 1 64 1 2025-11-27 03:20:38.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54456 1 80 1 2025-11-27 03:20:38.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54153 1 109 1 2025-11-27 03:18:13.004 00:03:00.584 TCP 28.154.0.1:179 -> 28.157.0.1:37077 8 492 1 2025-11-27 03:18:13.458 00:03:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 7 421 1 2025-11-27 03:21:39.057 00:00:00.000 UDP 28.104.0.1:37553 -> 198.28.0.2:53 1 64 1 2025-11-27 03:21:39.058 00:00:00.000 UDP 28.104.0.1:39789 -> 198.28.0.2:53 1 64 1 2025-11-27 03:21:39.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37553 1 109 1 2025-11-27 03:21:39.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39789 1 80 1 2025-11-27 03:22:39.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41424 1 80 1 2025-11-27 03:22:39.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60252 1 109 1 2025-11-27 03:22:39.356 00:00:00.000 UDP 28.104.0.1:41424 -> 198.28.0.2:53 1 64 1 2025-11-27 03:22:39.356 00:00:00.000 UDP 28.104.0.1:60252 -> 198.28.0.2:53 1 64 1 2025-11-27 03:23:29.860 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:23:39.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50090 1 109 1 2025-11-27 03:23:39.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38009 1 80 1 2025-11-27 03:23:39.610 00:00:00.000 UDP 28.104.0.1:50090 -> 198.28.0.2:53 1 64 1 2025-11-27 03:23:39.611 00:00:00.000 UDP 28.104.0.1:38009 -> 198.28.0.2:53 1 64 1 2025-11-27 03:20:04.438 00:05:08.577 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:20:11.483 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2576 1 2025-11-27 03:24:39.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60862 1 80 1 2025-11-27 03:24:39.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37149 1 109 1 2025-11-27 03:24:39.880 00:00:00.000 UDP 28.104.0.1:60862 -> 198.28.0.2:53 1 64 1 2025-11-27 03:24:39.880 00:00:00.000 UDP 28.104.0.1:37149 -> 198.28.0.2:53 1 64 1 2025-11-27 03:21:04.449 00:05:08.559 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:21:04.489 00:05:08.710 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:25:40.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35372 1 80 1 2025-11-27 03:25:40.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40357 1 109 1 2025-11-27 03:25:40.181 00:00:00.000 UDP 28.104.0.1:35372 -> 198.28.0.2:53 1 64 1 2025-11-27 03:25:40.181 00:00:00.000 UDP 28.104.0.1:40357 -> 198.28.0.2:53 1 64 1 2025-11-27 03:22:04.440 00:05:08.770 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:26:40.472 00:00:00.000 UDP 28.104.0.1:50328 -> 198.28.0.2:53 1 64 1 2025-11-27 03:26:40.472 00:00:00.000 UDP 28.104.0.1:33203 -> 198.28.0.2:53 1 64 1 2025-11-27 03:26:40.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33203 1 109 1 2025-11-27 03:26:40.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50328 1 80 1 2025-11-27 03:22:13.005 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 809 1 2025-11-27 03:22:13.005 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 809 1 2025-11-27 03:27:40.762 00:00:00.000 UDP 28.104.0.1:47783 -> 198.28.0.2:53 1 64 1 2025-11-27 03:27:40.762 00:00:00.000 UDP 28.104.0.1:47961 -> 198.28.0.2:53 1 64 1 2025-11-27 03:27:40.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47783 1 109 1 2025-11-27 03:27:40.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47961 1 80 1 2025-11-27 03:28:30.014 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:28:41.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48620 1 80 1 2025-11-27 03:28:41.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54188 1 109 1 2025-11-27 03:28:41.044 00:00:00.000 UDP 28.104.0.1:48620 -> 198.28.0.2:53 1 64 1 2025-11-27 03:28:41.043 00:00:00.000 UDP 28.104.0.1:54188 -> 198.28.0.2:53 1 64 1 2025-11-27 03:25:31.490 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2696 1 2025-11-27 03:29:41.343 00:00:00.000 UDP 28.104.0.1:55445 -> 198.28.0.2:53 1 64 1 2025-11-27 03:29:41.343 00:00:00.000 UDP 28.104.0.1:39455 -> 198.28.0.2:53 1 64 1 2025-11-27 03:29:41.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39455 1 80 1 2025-11-27 03:29:41.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55445 1 109 1 2025-11-27 03:26:04.445 00:05:08.572 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:30:41.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47088 1 109 1 2025-11-27 03:30:41.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46156 1 80 1 2025-11-27 03:30:41.595 00:00:00.000 UDP 28.104.0.1:46156 -> 198.28.0.2:53 1 64 1 2025-11-27 03:30:41.595 00:00:00.000 UDP 28.104.0.1:47088 -> 198.28.0.2:53 1 64 1 2025-11-27 03:27:04.453 00:05:08.552 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:27:04.494 00:05:08.707 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:31:41.852 00:00:00.000 UDP 28.104.0.1:34306 -> 198.28.0.2:53 1 64 1 2025-11-27 03:31:41.852 00:00:00.000 UDP 28.104.0.1:40263 -> 198.28.0.2:53 1 64 1 2025-11-27 03:31:41.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40263 1 80 1 2025-11-27 03:31:41.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34306 1 109 1 2025-11-27 03:28:04.444 00:05:08.768 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:32:42.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53518 1 109 1 2025-11-27 03:32:42.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45138 1 80 1 2025-11-27 03:32:42.170 00:00:00.000 UDP 28.104.0.1:45138 -> 198.28.0.2:53 1 64 1 2025-11-27 03:32:42.170 00:00:00.000 UDP 28.104.0.1:53518 -> 198.28.0.2:53 1 64 1 2025-11-27 03:28:13.589 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 790 1 2025-11-27 03:28:13.461 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 790 1 2025-11-27 03:33:30.125 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:33:42.457 00:00:00.000 UDP 28.104.0.1:47776 -> 198.28.0.2:53 1 64 1 2025-11-27 03:33:42.458 00:00:00.000 UDP 28.104.0.1:33260 -> 198.28.0.2:53 1 64 1 2025-11-27 03:33:42.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47776 1 80 1 2025-11-27 03:33:42.469 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33260 1 109 1 2025-11-27 03:34:42.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52661 1 109 1 2025-11-27 03:34:42.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59723 1 80 1 2025-11-27 03:34:42.704 00:00:00.000 UDP 28.104.0.1:59723 -> 198.28.0.2:53 1 64 1 2025-11-27 03:34:42.704 00:00:00.000 UDP 28.104.0.1:52661 -> 198.28.0.2:53 1 64 1 2025-11-27 03:30:51.496 00:05:10.001 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2516 1 2025-11-27 03:35:42.999 00:00:00.000 UDP 28.104.0.1:56065 -> 198.28.0.2:53 1 64 1 2025-11-27 03:35:42.999 00:00:00.000 UDP 28.104.0.1:35162 -> 198.28.0.2:53 1 64 1 2025-11-27 03:35:43.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56065 1 109 1 2025-11-27 03:35:43.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35162 1 80 1 2025-11-27 03:32:04.445 00:05:08.571 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:36:43.297 00:00:00.000 UDP 28.104.0.1:53356 -> 198.28.0.2:53 1 64 1 2025-11-27 03:36:43.297 00:00:00.000 UDP 28.104.0.1:46651 -> 198.28.0.2:53 1 64 1 2025-11-27 03:36:43.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53356 1 109 1 2025-11-27 03:36:43.306 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46651 1 80 1 2025-11-27 03:33:04.455 00:05:08.553 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:33:04.495 00:05:08.707 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:37:43.591 00:00:00.000 UDP 28.104.0.1:50796 -> 198.28.0.2:53 1 64 1 2025-11-27 03:37:43.591 00:00:00.000 UDP 28.104.0.1:37814 -> 198.28.0.2:53 1 64 1 2025-11-27 03:37:43.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50796 1 80 1 2025-11-27 03:37:43.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37814 1 109 1 2025-11-27 03:34:04.446 00:05:08.768 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:38:30.363 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:38:43.882 00:00:00.000 UDP 28.104.0.1:45363 -> 198.28.0.2:53 1 64 1 2025-11-27 03:38:43.882 00:00:00.000 UDP 28.104.0.1:41565 -> 198.28.0.2:53 1 64 1 2025-11-27 03:38:43.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45363 1 80 1 2025-11-27 03:38:43.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41565 1 109 1 2025-11-27 03:39:44.179 00:00:00.000 UDP 28.104.0.1:52113 -> 198.28.0.2:53 1 64 1 2025-11-27 03:39:44.179 00:00:00.000 UDP 28.104.0.1:43462 -> 198.28.0.2:53 1 64 1 2025-11-27 03:39:44.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43462 1 109 1 2025-11-27 03:39:44.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52113 1 80 1 2025-11-27 03:35:13.008 00:06:00.591 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 03:35:13.008 00:06:00.457 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 03:36:11.496 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-27 03:40:44.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37638 1 109 1 2025-11-27 03:40:44.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49014 1 80 1 2025-11-27 03:40:44.485 00:00:00.000 UDP 28.104.0.1:37638 -> 198.28.0.2:53 1 64 1 2025-11-27 03:40:44.485 00:00:00.000 UDP 28.104.0.1:49014 -> 198.28.0.2:53 1 64 1 2025-11-27 03:41:44.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47243 1 80 1 2025-11-27 03:41:44.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40263 1 109 1 2025-11-27 03:41:44.783 00:00:00.000 UDP 28.104.0.1:47243 -> 198.28.0.2:53 1 64 1 2025-11-27 03:41:44.783 00:00:00.000 UDP 28.104.0.1:40263 -> 198.28.0.2:53 1 64 1 2025-11-27 03:38:04.446 00:05:08.573 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:42:45.098 00:00:00.000 UDP 28.104.0.1:49246 -> 198.28.0.2:53 1 64 1 2025-11-27 03:42:45.098 00:00:00.000 UDP 28.104.0.1:34559 -> 198.28.0.2:53 1 64 1 2025-11-27 03:42:45.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34559 1 80 1 2025-11-27 03:42:45.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49246 1 109 1 2025-11-27 03:39:04.455 00:05:08.553 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:39:04.495 00:05:08.708 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:43:30.366 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:43:45.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37349 1 80 1 2025-11-27 03:43:45.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56200 1 109 1 2025-11-27 03:43:45.385 00:00:00.000 UDP 28.104.0.1:56200 -> 198.28.0.2:53 1 64 1 2025-11-27 03:43:45.385 00:00:00.000 UDP 28.104.0.1:37349 -> 198.28.0.2:53 1 64 1 2025-11-27 03:40:04.447 00:05:08.767 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:44:45.680 00:00:00.000 UDP 28.104.0.1:54737 -> 198.28.0.2:53 1 64 1 2025-11-27 03:44:45.680 00:00:00.000 UDP 28.104.0.1:42355 -> 198.28.0.2:53 1 64 1 2025-11-27 03:44:45.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54737 1 109 1 2025-11-27 03:44:45.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42355 1 80 1 2025-11-27 03:41:31.500 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2892 1 2025-11-27 03:45:45.933 00:00:00.000 UDP 28.104.0.1:43507 -> 198.28.0.2:53 1 64 1 2025-11-27 03:45:45.933 00:00:00.000 UDP 28.104.0.1:37329 -> 198.28.0.2:53 1 64 1 2025-11-27 03:45:45.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43507 1 109 1 2025-11-27 03:45:45.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37329 1 80 1 2025-11-27 03:46:46.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46190 1 109 1 2025-11-27 03:46:46.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60318 1 80 1 2025-11-27 03:46:46.238 00:00:00.000 UDP 28.104.0.1:46190 -> 198.28.0.2:53 1 64 1 2025-11-27 03:46:46.239 00:00:00.000 UDP 28.104.0.1:60318 -> 198.28.0.2:53 1 64 1 2025-11-27 03:42:13.009 00:06:00.031 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 809 1 2025-11-27 03:42:13.009 00:06:00.457 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 03:47:46.532 00:00:00.000 UDP 28.104.0.1:36069 -> 198.28.0.2:53 1 64 1 2025-11-27 03:47:46.532 00:00:00.000 UDP 28.104.0.1:40215 -> 198.28.0.2:53 1 64 1 2025-11-27 03:47:46.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36069 1 109 1 2025-11-27 03:47:46.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40215 1 80 1 2025-11-27 03:44:04.450 00:05:08.600 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:48:30.251 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:48:46.790 00:00:00.000 UDP 28.104.0.1:50485 -> 198.28.0.2:53 1 64 1 2025-11-27 03:48:46.789 00:00:00.000 UDP 28.104.0.1:47436 -> 198.28.0.2:53 1 64 1 2025-11-27 03:48:46.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47436 1 80 1 2025-11-27 03:48:46.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50485 1 109 1 2025-11-27 03:45:04.462 00:05:08.577 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:45:04.502 00:05:08.703 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:49:47.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57410 1 109 1 2025-11-27 03:49:47.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48508 1 80 1 2025-11-27 03:49:47.097 00:00:00.000 UDP 28.104.0.1:57410 -> 198.28.0.2:53 1 64 1 2025-11-27 03:49:47.097 00:00:00.000 UDP 28.104.0.1:48508 -> 198.28.0.2:53 1 64 1 2025-11-27 03:46:04.453 00:05:08.763 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:50:47.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46956 1 80 1 2025-11-27 03:50:47.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38991 1 109 1 2025-11-27 03:50:47.387 00:00:00.000 UDP 28.104.0.1:38991 -> 198.28.0.2:53 1 64 1 2025-11-27 03:50:47.387 00:00:00.000 UDP 28.104.0.1:46956 -> 198.28.0.2:53 1 64 1 2025-11-27 03:46:51.505 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-11-27 03:51:47.682 00:00:00.000 UDP 28.104.0.1:46794 -> 198.28.0.2:53 1 64 1 2025-11-27 03:51:47.681 00:00:00.000 UDP 28.104.0.1:53112 -> 198.28.0.2:53 1 64 1 2025-11-27 03:51:47.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53112 1 80 1 2025-11-27 03:51:47.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46794 1 109 1 2025-11-27 03:52:47.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33221 1 109 1 2025-11-27 03:52:47.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38230 1 80 1 2025-11-27 03:52:47.978 00:00:00.000 UDP 28.104.0.1:38230 -> 198.28.0.2:53 1 64 1 2025-11-27 03:52:47.978 00:00:00.000 UDP 28.104.0.1:33221 -> 198.28.0.2:53 1 64 1 2025-11-27 03:48:13.599 00:05:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 11 667 1 2025-11-27 03:49:13.039 00:04:00.426 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 03:53:30.404 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:53:48.279 00:00:00.000 UDP 28.104.0.1:39662 -> 198.28.0.2:53 1 64 1 2025-11-27 03:53:48.279 00:00:00.000 UDP 28.104.0.1:48912 -> 198.28.0.2:53 1 64 1 2025-11-27 03:53:48.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48912 1 80 1 2025-11-27 03:53:48.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39662 1 109 1 2025-11-27 03:50:04.460 00:05:08.593 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:54:48.576 00:00:00.000 UDP 28.104.0.1:37841 -> 198.28.0.2:53 1 64 1 2025-11-27 03:54:48.576 00:00:00.000 UDP 28.104.0.1:52293 -> 198.28.0.2:53 1 64 1 2025-11-27 03:54:48.588 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52293 1 109 1 2025-11-27 03:54:48.588 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37841 1 80 1 2025-11-27 03:51:04.470 00:05:08.572 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:51:04.510 00:05:08.696 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:55:48.867 00:00:00.000 UDP 28.104.0.1:45771 -> 198.28.0.2:53 1 64 1 2025-11-27 03:55:48.867 00:00:00.000 UDP 28.104.0.1:54880 -> 198.28.0.2:53 1 64 1 2025-11-27 03:55:48.878 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54880 1 109 1 2025-11-27 03:55:48.878 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45771 1 80 1 2025-11-27 03:52:04.463 00:05:08.754 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:52:11.507 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2592 1 2025-11-27 03:56:49.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58119 1 109 1 2025-11-27 03:56:49.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52824 1 80 1 2025-11-27 03:56:49.182 00:00:00.000 UDP 28.104.0.1:52824 -> 198.28.0.2:53 1 64 1 2025-11-27 03:56:49.182 00:00:00.000 UDP 28.104.0.1:58119 -> 198.28.0.2:53 1 64 1 2025-11-27 03:57:49.479 00:00:00.000 UDP 28.104.0.1:35922 -> 198.28.0.2:53 1 64 1 2025-11-27 03:57:49.480 00:00:00.000 UDP 28.104.0.1:60716 -> 198.28.0.2:53 1 64 1 2025-11-27 03:57:49.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60716 1 109 1 2025-11-27 03:57:49.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35922 1 80 1 2025-11-27 03:54:13.043 00:04:00.559 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 03:54:13.043 00:04:00.424 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 03:58:30.832 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:58:49.778 00:00:00.000 UDP 28.104.0.1:50557 -> 198.28.0.2:53 1 64 1 2025-11-27 03:58:49.778 00:00:00.000 UDP 28.104.0.1:42579 -> 198.28.0.2:53 1 64 1 2025-11-27 03:58:49.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50557 1 80 1 2025-11-27 03:58:49.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42579 1 109 1 Summary: total flows: 323, total bytes: 94448, total packets: 1391, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-11-27 02:56:04 - 2025-11-27 03:58:49 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0030s User: 0.0040s Wall: 0.0033s flows/second: 97993.5 Runtime: 0.0033s