Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 17:59:29.717 00:00:00.000 UDP 28.104.0.1:52993 -> 198.28.0.2:53 1 64 1 2025-11-27 17:59:29.717 00:00:00.000 UDP 28.104.0.1:60766 -> 198.28.0.2:53 1 64 1 2025-11-27 17:59:29.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60766 1 80 1 2025-11-27 17:59:29.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52993 1 109 1 2025-11-27 17:56:04.740 00:05:08.574 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 17:59:13.302 00:01:00.555 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 17:59:13.302 00:01:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 18:00:30.047 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49010 1 80 1 2025-11-27 18:00:30.047 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50993 1 109 1 2025-11-27 18:00:30.038 00:00:00.000 UDP 28.104.0.1:50993 -> 198.28.0.2:53 1 64 1 2025-11-27 18:00:30.037 00:00:00.000 UDP 28.104.0.1:49010 -> 198.28.0.2:53 1 64 1 2025-11-27 17:57:04.748 00:05:08.555 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 17:57:04.788 00:05:08.747 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 18:01:30.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58702 1 80 1 2025-11-27 18:01:30.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51168 1 109 1 2025-11-27 18:01:30.290 00:00:00.000 UDP 28.104.0.1:58702 -> 198.28.0.2:53 1 64 1 2025-11-27 18:01:30.290 00:00:00.000 UDP 28.104.0.1:51168 -> 198.28.0.2:53 1 64 1 2025-11-27 17:58:04.739 00:05:08.807 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 18:02:30.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33650 1 109 1 2025-11-27 18:02:30.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39105 1 80 1 2025-11-27 18:02:30.587 00:00:00.000 UDP 28.104.0.1:39105 -> 198.28.0.2:53 1 64 1 2025-11-27 18:02:30.587 00:00:00.000 UDP 28.104.0.1:33650 -> 198.28.0.2:53 1 64 1 2025-11-27 17:59:12.572 00:05:10.216 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2772 1 2025-11-27 18:03:30.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37230 1 109 1 2025-11-27 18:03:30.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56899 1 80 1 2025-11-27 18:03:30.903 00:00:00.000 UDP 28.104.0.1:37230 -> 198.28.0.2:53 1 64 1 2025-11-27 18:03:30.903 00:00:00.000 UDP 28.104.0.1:56899 -> 198.28.0.2:53 1 64 1 2025-11-27 18:03:47.703 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:04:31.212 00:00:00.000 UDP 28.104.0.1:56728 -> 198.28.0.2:53 1 64 1 2025-11-27 18:04:31.212 00:00:00.000 UDP 28.104.0.1:37439 -> 198.28.0.2:53 1 64 1 2025-11-27 18:04:31.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37439 1 109 1 2025-11-27 18:04:31.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56728 1 80 1 2025-11-27 18:01:13.304 00:04:00.558 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 18:01:13.304 00:04:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 18:05:31.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38171 1 80 1 2025-11-27 18:05:31.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35142 1 109 1 2025-11-27 18:05:31.517 00:00:00.000 UDP 28.104.0.1:35142 -> 198.28.0.2:53 1 64 1 2025-11-27 18:05:31.517 00:00:00.000 UDP 28.104.0.1:38171 -> 198.28.0.2:53 1 64 1 2025-11-27 18:02:04.739 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 18:06:31.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33220 1 80 1 2025-11-27 18:06:31.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55397 1 109 1 2025-11-27 18:06:31.780 00:00:00.000 UDP 28.104.0.1:33220 -> 198.28.0.2:53 1 64 1 2025-11-27 18:06:31.780 00:00:00.000 UDP 28.104.0.1:55397 -> 198.28.0.2:53 1 64 1 2025-11-27 18:03:04.791 00:05:08.747 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 18:03:04.751 00:05:08.555 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 18:07:32.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59239 1 109 1 2025-11-27 18:07:32.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43890 1 80 1 2025-11-27 18:07:32.079 00:00:00.000 UDP 28.104.0.1:59239 -> 198.28.0.2:53 1 64 1 2025-11-27 18:07:32.078 00:00:00.000 UDP 28.104.0.1:43890 -> 198.28.0.2:53 1 64 1 2025-11-27 18:04:04.739 00:05:08.807 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 18:08:32.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56494 1 109 1 2025-11-27 18:08:32.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52266 1 80 1 2025-11-27 18:08:32.337 00:00:00.000 UDP 28.104.0.1:52266 -> 198.28.0.2:53 1 64 1 2025-11-27 18:08:32.337 00:00:00.000 UDP 28.104.0.1:56494 -> 198.28.0.2:53 1 64 1 2025-11-27 18:04:32.575 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2520 1 2025-11-27 18:08:47.626 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:09:32.636 00:00:00.000 UDP 28.104.0.1:60212 -> 198.28.0.2:53 1 64 1 2025-11-27 18:09:32.636 00:00:00.000 UDP 28.104.0.1:48543 -> 198.28.0.2:53 1 64 1 2025-11-27 18:09:32.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60212 1 80 1 2025-11-27 18:09:32.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48543 1 109 1 2025-11-27 18:06:13.304 00:04:00.559 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 18:06:13.304 00:04:00.475 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 18:10:33.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37741 1 109 1 2025-11-27 18:10:33.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56825 1 80 1 2025-11-27 18:10:33.305 00:00:00.000 UDP 28.104.0.1:56825 -> 198.28.0.2:53 1 64 1 2025-11-27 18:10:33.305 00:00:00.000 UDP 28.104.0.1:37741 -> 198.28.0.2:53 1 64 1 2025-11-27 18:11:33.610 00:00:00.000 UDP 28.104.0.1:43065 -> 198.28.0.2:53 1 64 1 2025-11-27 18:11:33.610 00:00:00.000 UDP 28.104.0.1:52088 -> 198.28.0.2:53 1 64 1 2025-11-27 18:11:33.620 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43065 1 109 1 2025-11-27 18:11:33.620 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52088 1 80 1 2025-11-27 18:08:04.742 00:05:08.574 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 18:12:33.861 00:00:00.000 UDP 28.104.0.1:49138 -> 198.28.0.2:53 1 64 1 2025-11-27 18:12:33.861 00:00:00.000 UDP 28.104.0.1:37030 -> 198.28.0.2:53 1 64 1 2025-11-27 18:12:33.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49138 1 109 1 2025-11-27 18:12:33.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37030 1 80 1 2025-11-27 18:09:04.753 00:05:08.553 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 18:09:04.794 00:05:08.744 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 18:13:34.183 00:00:00.000 UDP 28.104.0.1:52502 -> 198.28.0.2:53 1 64 1 2025-11-27 18:13:34.184 00:00:00.000 UDP 28.104.0.1:43562 -> 198.28.0.2:53 1 64 1 2025-11-27 18:13:34.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43562 1 109 1 2025-11-27 18:13:34.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52502 1 80 1 2025-11-27 18:13:47.922 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:09:52.583 00:05:10.052 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2840 1 2025-11-27 18:10:04.743 00:05:08.804 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 18:14:34.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41320 1 80 1 2025-11-27 18:14:34.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56343 1 109 1 2025-11-27 18:14:34.477 00:00:00.000 UDP 28.104.0.1:41320 -> 198.28.0.2:53 1 64 1 2025-11-27 18:14:34.477 00:00:00.000 UDP 28.104.0.1:56343 -> 198.28.0.2:53 1 64 1 2025-11-27 18:11:13.305 00:04:00.560 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 18:11:13.305 00:04:00.476 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 18:15:34.769 00:00:00.000 UDP 28.104.0.1:34406 -> 198.28.0.2:53 1 64 1 2025-11-27 18:15:34.769 00:00:00.000 UDP 28.104.0.1:47319 -> 198.28.0.2:53 1 64 1 2025-11-27 18:15:34.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34406 1 80 1 2025-11-27 18:15:34.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47319 1 109 1 2025-11-27 18:16:35.056 00:00:00.000 UDP 28.104.0.1:34062 -> 198.28.0.2:53 1 64 1 2025-11-27 18:16:35.056 00:00:00.000 UDP 28.104.0.1:43009 -> 198.28.0.2:53 1 64 1 2025-11-27 18:16:35.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34062 1 80 1 2025-11-27 18:16:35.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43009 1 109 1 2025-11-27 18:16:13.306 00:01:00.559 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 18:16:13.306 00:01:00.476 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 18:17:35.397 00:00:00.000 UDP 28.104.0.1:35585 -> 198.28.0.2:53 1 64 1 2025-11-27 18:17:35.397 00:00:00.000 UDP 28.104.0.1:53187 -> 198.28.0.2:53 1 64 1 2025-11-27 18:17:35.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35585 1 80 1 2025-11-27 18:17:35.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53187 1 109 1 2025-11-27 18:14:04.746 00:05:08.572 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 18:18:35.647 00:00:00.000 UDP 28.104.0.1:48400 -> 198.28.0.2:53 1 64 1 2025-11-27 18:18:35.647 00:00:00.000 UDP 28.104.0.1:45919 -> 198.28.0.2:53 1 64 1 2025-11-27 18:18:35.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45919 1 109 1 2025-11-27 18:18:35.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48400 1 80 1 2025-11-27 18:18:47.779 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:15:04.794 00:05:08.747 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 18:15:04.754 00:05:08.554 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 18:15:12.591 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2620 1 2025-11-27 18:19:35.941 00:00:00.000 UDP 28.104.0.1:56052 -> 198.28.0.2:53 1 64 1 2025-11-27 18:19:35.941 00:00:00.000 UDP 28.104.0.1:52337 -> 198.28.0.2:53 1 64 1 2025-11-27 18:19:35.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56052 1 80 1 2025-11-27 18:19:35.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52337 1 109 1 2025-11-27 18:16:04.744 00:05:08.806 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 18:18:13.309 00:02:00.559 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 18:18:13.309 00:02:00.475 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 18:20:36.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56701 1 80 1 2025-11-27 18:20:36.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51784 1 109 1 2025-11-27 18:20:36.241 00:00:00.000 UDP 28.104.0.1:56701 -> 198.28.0.2:53 1 64 1 2025-11-27 18:20:36.241 00:00:00.000 UDP 28.104.0.1:51784 -> 198.28.0.2:53 1 64 1 2025-11-27 18:21:36.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57239 1 80 1 2025-11-27 18:21:36.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58229 1 109 1 2025-11-27 18:21:36.537 00:00:00.000 UDP 28.104.0.1:57239 -> 198.28.0.2:53 1 64 1 2025-11-27 18:21:36.537 00:00:00.000 UDP 28.104.0.1:58229 -> 198.28.0.2:53 1 64 1 2025-11-27 18:21:13.309 00:01:00.558 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 18:21:13.309 00:01:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 18:22:36.788 00:00:00.000 UDP 28.104.0.1:49771 -> 198.28.0.2:53 1 64 1 2025-11-27 18:22:36.788 00:00:00.000 UDP 28.104.0.1:39660 -> 198.28.0.2:53 1 64 1 2025-11-27 18:22:36.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49771 1 80 1 2025-11-27 18:22:36.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39660 1 109 1 2025-11-27 18:23:37.089 00:00:00.000 UDP 28.104.0.1:47842 -> 198.28.0.2:53 1 64 1 2025-11-27 18:23:37.088 00:00:00.000 UDP 28.104.0.1:56885 -> 198.28.0.2:53 1 64 1 2025-11-27 18:23:37.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47842 1 80 1 2025-11-27 18:23:37.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56885 1 109 1 2025-11-27 18:23:47.927 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:20:04.746 00:05:08.574 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 18:24:37.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44677 1 109 1 2025-11-27 18:24:37.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43240 1 80 1 2025-11-27 18:24:37.892 00:00:00.000 UDP 28.104.0.1:44677 -> 198.28.0.2:53 1 64 1 2025-11-27 18:24:37.893 00:00:00.000 UDP 28.104.0.1:43240 -> 198.28.0.2:53 1 64 1 2025-11-27 18:20:32.603 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 18:23:13.309 00:02:00.558 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 18:23:13.309 00:02:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 18:21:04.797 00:05:08.748 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 18:21:04.757 00:05:08.553 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 18:25:38.202 00:00:00.000 UDP 28.104.0.1:53917 -> 198.28.0.2:53 1 64 1 2025-11-27 18:25:38.202 00:00:00.000 UDP 28.104.0.1:44225 -> 198.28.0.2:53 1 64 1 2025-11-27 18:25:38.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44225 1 109 1 2025-11-27 18:25:38.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53917 1 80 1 2025-11-27 18:22:04.746 00:05:08.808 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 18:26:38.468 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34133 1 109 1 2025-11-27 18:26:38.468 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59365 1 80 1 2025-11-27 18:26:38.457 00:00:00.000 UDP 28.104.0.1:59365 -> 198.28.0.2:53 1 64 1 2025-11-27 18:26:38.457 00:00:00.000 UDP 28.104.0.1:34133 -> 198.28.0.2:53 1 64 1 2025-11-27 18:26:13.310 00:01:00.558 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 18:26:13.310 00:01:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 18:27:38.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51438 1 109 1 2025-11-27 18:27:38.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55806 1 80 1 2025-11-27 18:27:38.744 00:00:00.000 UDP 28.104.0.1:51438 -> 198.28.0.2:53 1 64 1 2025-11-27 18:27:38.744 00:00:00.000 UDP 28.104.0.1:55806 -> 198.28.0.2:53 1 64 1 2025-11-27 18:28:38.998 00:00:00.000 UDP 28.104.0.1:45340 -> 198.28.0.2:53 1 64 1 2025-11-27 18:28:39.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45340 1 80 1 2025-11-27 18:28:39.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60283 1 109 1 2025-11-27 18:28:39.000 00:00:00.000 UDP 28.104.0.1:60283 -> 198.28.0.2:53 1 64 1 2025-11-27 18:28:48.134 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:29:39.297 00:00:00.000 UDP 28.104.0.1:40389 -> 198.28.0.2:53 1 64 1 2025-11-27 18:29:39.297 00:00:00.000 UDP 28.104.0.1:44722 -> 198.28.0.2:53 1 64 1 2025-11-27 18:29:39.305 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40389 1 80 1 2025-11-27 18:29:39.305 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44722 1 109 1 2025-11-27 18:25:52.611 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2468 1 2025-11-27 18:28:13.310 00:02:00.559 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 18:28:13.310 00:02:00.475 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 18:26:04.746 00:05:08.574 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 18:30:39.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45919 1 80 1 2025-11-27 18:30:39.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33711 1 109 1 2025-11-27 18:30:39.595 00:00:00.000 UDP 28.104.0.1:45919 -> 198.28.0.2:53 1 64 1 2025-11-27 18:30:39.595 00:00:00.000 UDP 28.104.0.1:33711 -> 198.28.0.2:53 1 64 1 2025-11-27 18:27:04.757 00:05:08.554 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 18:27:04.798 00:05:08.747 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 18:31:39.890 00:00:00.000 UDP 28.104.0.1:32803 -> 198.28.0.2:53 1 64 1 2025-11-27 18:31:39.891 00:00:00.000 UDP 28.104.0.1:37616 -> 198.28.0.2:53 1 64 1 2025-11-27 18:31:39.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32803 1 80 1 2025-11-27 18:31:39.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37616 1 109 1 2025-11-27 18:31:13.310 00:01:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 18:31:13.310 00:01:00.558 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 18:28:04.747 00:05:08.809 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 18:32:40.168 00:00:00.000 UDP 28.104.0.1:33632 -> 198.28.0.2:53 1 64 1 2025-11-27 18:32:40.168 00:00:00.000 UDP 28.104.0.1:56825 -> 198.28.0.2:53 1 64 1 2025-11-27 18:32:40.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56825 1 80 1 2025-11-27 18:32:40.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33632 1 109 1 2025-11-27 18:33:40.464 00:00:00.000 UDP 28.104.0.1:40435 -> 198.28.0.2:53 1 64 1 2025-11-27 18:33:40.464 00:00:00.000 UDP 28.104.0.1:49016 -> 198.28.0.2:53 1 64 1 2025-11-27 18:33:40.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49016 1 80 1 2025-11-27 18:33:40.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40435 1 109 1 2025-11-27 18:33:48.182 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:34:40.754 00:00:00.000 UDP 28.104.0.1:33315 -> 198.28.0.2:53 1 64 1 2025-11-27 18:34:40.754 00:00:00.000 UDP 28.104.0.1:57657 -> 198.28.0.2:53 1 64 1 2025-11-27 18:34:40.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57657 1 109 1 2025-11-27 18:34:40.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33315 1 80 1 2025-11-27 18:31:12.616 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2824 1 2025-11-27 18:35:41.070 00:00:00.000 UDP 28.104.0.1:52554 -> 198.28.0.2:53 1 64 1 2025-11-27 18:35:41.070 00:00:00.000 UDP 28.104.0.1:56178 -> 198.28.0.2:53 1 64 1 2025-11-27 18:35:41.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56178 1 109 1 2025-11-27 18:35:41.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52554 1 80 1 2025-11-27 18:32:04.748 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 18:36:41.359 00:00:00.000 UDP 28.104.0.1:49518 -> 198.28.0.2:53 1 64 1 2025-11-27 18:36:41.359 00:00:00.000 UDP 28.104.0.1:44826 -> 198.28.0.2:53 1 64 1 2025-11-27 18:36:41.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44826 1 109 1 2025-11-27 18:36:41.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49518 1 80 1 2025-11-27 18:33:13.311 00:04:00.559 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 18:33:13.311 00:04:00.479 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 18:33:04.759 00:05:08.554 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 18:33:04.799 00:05:08.746 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 18:37:41.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38146 1 80 1 2025-11-27 18:37:41.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41908 1 109 1 2025-11-27 18:37:41.653 00:00:00.000 UDP 28.104.0.1:38146 -> 198.28.0.2:53 1 64 1 2025-11-27 18:37:41.653 00:00:00.000 UDP 28.104.0.1:41908 -> 198.28.0.2:53 1 64 1 2025-11-27 18:34:04.749 00:05:08.807 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 18:38:41.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42551 1 80 1 2025-11-27 18:38:41.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37707 1 109 1 2025-11-27 18:38:41.910 00:00:00.000 UDP 28.104.0.1:37707 -> 198.28.0.2:53 1 64 1 2025-11-27 18:38:41.910 00:00:00.000 UDP 28.104.0.1:42551 -> 198.28.0.2:53 1 64 1 2025-11-27 18:38:48.349 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:39:42.212 00:00:00.000 UDP 28.104.0.1:41654 -> 198.28.0.2:53 1 64 1 2025-11-27 18:39:42.212 00:00:00.000 UDP 28.104.0.1:49055 -> 198.28.0.2:53 1 64 1 2025-11-27 18:39:42.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41654 1 80 1 2025-11-27 18:39:42.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49055 1 109 1 2025-11-27 18:36:32.624 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2720 1 2025-11-27 18:40:42.504 00:00:00.000 UDP 28.104.0.1:58799 -> 198.28.0.2:53 1 64 1 2025-11-27 18:40:42.504 00:00:00.000 UDP 28.104.0.1:60772 -> 198.28.0.2:53 1 64 1 2025-11-27 18:40:42.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60772 1 80 1 2025-11-27 18:40:42.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58799 1 109 1 2025-11-27 18:41:42.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38180 1 80 1 2025-11-27 18:41:42.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58768 1 109 1 2025-11-27 18:41:42.796 00:00:00.000 UDP 28.104.0.1:58768 -> 198.28.0.2:53 1 64 1 2025-11-27 18:41:42.796 00:00:00.000 UDP 28.104.0.1:38180 -> 198.28.0.2:53 1 64 1 2025-11-27 18:38:04.750 00:05:08.576 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 18:38:13.313 00:04:00.558 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 18:38:13.313 00:04:00.478 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 18:42:43.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32910 1 109 1 2025-11-27 18:42:43.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52585 1 80 1 2025-11-27 18:42:43.100 00:00:00.000 UDP 28.104.0.1:32910 -> 198.28.0.2:53 1 64 1 2025-11-27 18:42:43.100 00:00:00.000 UDP 28.104.0.1:52585 -> 198.28.0.2:53 1 64 1 2025-11-27 18:39:04.760 00:05:08.555 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 18:39:04.800 00:05:08.749 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 18:43:43.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36751 1 109 1 2025-11-27 18:43:43.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54436 1 80 1 2025-11-27 18:43:43.369 00:00:00.000 UDP 28.104.0.1:54436 -> 198.28.0.2:53 1 64 1 2025-11-27 18:43:43.369 00:00:00.000 UDP 28.104.0.1:36751 -> 198.28.0.2:53 1 64 1 2025-11-27 18:43:48.400 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:40:04.749 00:05:08.810 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 18:44:43.664 00:00:00.000 UDP 28.104.0.1:60024 -> 198.28.0.2:53 1 64 1 2025-11-27 18:44:43.664 00:00:00.000 UDP 28.104.0.1:58881 -> 198.28.0.2:53 1 64 1 2025-11-27 18:44:43.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60024 1 109 1 2025-11-27 18:44:43.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58881 1 80 1 2025-11-27 18:45:44.193 00:00:00.000 UDP 28.104.0.1:44316 -> 198.28.0.2:53 1 64 1 2025-11-27 18:45:44.193 00:00:00.000 UDP 28.104.0.1:52980 -> 198.28.0.2:53 1 64 1 2025-11-27 18:45:44.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52980 1 80 1 2025-11-27 18:45:44.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44316 1 109 1 2025-11-27 18:41:52.629 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2620 1 2025-11-27 18:46:44.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56058 1 109 1 2025-11-27 18:46:44.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52611 1 80 1 2025-11-27 18:46:44.496 00:00:00.000 UDP 28.104.0.1:52611 -> 198.28.0.2:53 1 64 1 2025-11-27 18:46:44.496 00:00:00.000 UDP 28.104.0.1:56058 -> 198.28.0.2:53 1 64 1 2025-11-27 18:43:13.316 00:04:00.475 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 18:43:13.316 00:04:00.557 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 18:47:44.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50227 1 109 1 2025-11-27 18:47:44.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56200 1 80 1 2025-11-27 18:47:44.759 00:00:00.000 UDP 28.104.0.1:50227 -> 198.28.0.2:53 1 64 1 2025-11-27 18:47:44.758 00:00:00.000 UDP 28.104.0.1:56200 -> 198.28.0.2:53 1 64 1 2025-11-27 18:44:04.751 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 18:48:45.057 00:00:00.000 UDP 28.104.0.1:38212 -> 198.28.0.2:53 1 64 1 2025-11-27 18:48:45.056 00:00:00.000 UDP 28.104.0.1:38468 -> 198.28.0.2:53 1 64 1 2025-11-27 18:48:48.746 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:48:45.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38468 1 80 1 2025-11-27 18:48:45.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38212 1 109 1 2025-11-27 18:45:04.760 00:05:08.555 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 18:45:04.800 00:05:08.751 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 18:49:45.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47511 1 109 1 2025-11-27 18:49:45.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39013 1 80 1 2025-11-27 18:49:45.351 00:00:00.000 UDP 28.104.0.1:39013 -> 198.28.0.2:53 1 64 1 2025-11-27 18:49:45.350 00:00:00.000 UDP 28.104.0.1:47511 -> 198.28.0.2:53 1 64 1 2025-11-27 18:46:04.750 00:05:08.811 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 18:50:45.650 00:00:00.000 UDP 28.104.0.1:44858 -> 198.28.0.2:53 1 64 1 2025-11-27 18:50:45.650 00:00:00.000 UDP 28.104.0.1:49593 -> 198.28.0.2:53 1 64 1 2025-11-27 18:50:45.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49593 1 109 1 2025-11-27 18:50:45.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44858 1 80 1 2025-11-27 18:47:12.636 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 18:51:45.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34119 1 80 1 2025-11-27 18:51:45.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60418 1 109 1 2025-11-27 18:51:45.939 00:00:00.000 UDP 28.104.0.1:34119 -> 198.28.0.2:53 1 64 1 2025-11-27 18:51:45.940 00:00:00.000 UDP 28.104.0.1:60418 -> 198.28.0.2:53 1 64 1 2025-11-27 18:48:13.316 00:04:00.557 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 18:48:13.316 00:04:00.475 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 18:52:46.887 00:00:00.000 UDP 28.104.0.1:41518 -> 198.28.0.2:53 1 64 1 2025-11-27 18:52:46.887 00:00:00.000 UDP 28.104.0.1:57692 -> 198.28.0.2:53 1 64 1 2025-11-27 18:52:46.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57692 1 80 1 2025-11-27 18:52:46.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41518 1 109 1 2025-11-27 18:53:47.200 00:00:00.000 UDP 28.104.0.1:60212 -> 198.28.0.2:53 1 64 1 2025-11-27 18:53:47.200 00:00:00.000 UDP 28.104.0.1:42046 -> 198.28.0.2:53 1 64 1 2025-11-27 18:53:48.663 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:53:47.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60212 1 109 1 2025-11-27 18:53:47.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42046 1 80 1 2025-11-27 18:53:13.317 00:01:00.475 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 18:53:13.317 00:01:00.558 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 18:50:04.751 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 18:54:47.462 00:00:00.000 UDP 28.104.0.1:47683 -> 198.28.0.2:53 1 64 1 2025-11-27 18:54:47.462 00:00:00.000 UDP 28.104.0.1:36523 -> 198.28.0.2:53 1 64 1 2025-11-27 18:54:47.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36523 1 80 1 2025-11-27 18:54:47.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47683 1 109 1 2025-11-27 18:51:04.761 00:05:08.555 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 18:51:04.801 00:05:08.751 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 18:55:47.711 00:00:00.000 UDP 28.104.0.1:34502 -> 198.28.0.2:53 1 64 1 2025-11-27 18:55:47.711 00:00:00.000 UDP 28.104.0.1:57653 -> 198.28.0.2:53 1 64 1 2025-11-27 18:55:47.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57653 1 109 1 2025-11-27 18:55:47.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34502 1 80 1 2025-11-27 18:52:04.751 00:05:08.811 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 18:52:32.640 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 18:56:48.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45691 1 109 1 2025-11-27 18:56:48.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60583 1 80 1 2025-11-27 18:56:48.000 00:00:00.000 UDP 28.104.0.1:45691 -> 198.28.0.2:53 1 64 1 2025-11-27 18:56:48.000 00:00:00.000 UDP 28.104.0.1:60583 -> 198.28.0.2:53 1 64 1 2025-11-27 18:55:13.317 00:02:00.560 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 18:55:13.317 00:02:00.476 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 18:57:48.311 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51422 1 80 1 2025-11-27 18:57:48.311 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42566 1 109 1 2025-11-27 18:57:48.302 00:00:00.000 UDP 28.104.0.1:42566 -> 198.28.0.2:53 1 64 1 2025-11-27 18:57:48.301 00:00:00.000 UDP 28.104.0.1:51422 -> 198.28.0.2:53 1 64 1 2025-11-27 18:58:48.711 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 18:58:48.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41424 1 80 1 2025-11-27 18:58:48.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58306 1 109 1 2025-11-27 18:58:48.594 00:00:00.000 UDP 28.104.0.1:41424 -> 198.28.0.2:53 1 64 1 2025-11-27 18:58:48.594 00:00:00.000 UDP 28.104.0.1:58306 -> 198.28.0.2:53 1 64 1 Summary: total flows: 337, total bytes: 94422, total packets: 1391, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-11-27 17:56:04 - 2025-11-27 18:58:48 Total flows processed: 337, passed: 337, Blocks skipped: 0, Bytes read: 35112 Sys: 0.0039s User: 0.0029s Wall: 0.0036s flows/second: 94578.8 Runtime: 0.0036s