Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 19:59:06.712 00:00:00.000 UDP 28.104.0.1:36259 -> 198.28.0.2:53 1 64 1 2025-11-27 19:59:06.712 00:00:00.000 UDP 28.104.0.1:44065 -> 198.28.0.2:53 1 64 1 2025-11-27 19:59:06.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44065 1 80 1 2025-11-27 19:59:06.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36259 1 109 1 2025-11-27 20:00:07.022 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35837 1 80 1 2025-11-27 20:00:07.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58650 1 109 1 2025-11-27 20:00:07.007 00:00:00.000 UDP 28.104.0.1:58650 -> 198.28.0.2:53 1 64 1 2025-11-27 20:00:07.007 00:00:00.000 UDP 28.104.0.1:35837 -> 198.28.0.2:53 1 64 1 2025-11-27 19:56:04.775 00:05:08.577 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 19:56:22.713 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2824 1 2025-11-27 20:01:07.291 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34364 1 109 1 2025-11-27 20:01:07.291 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37941 1 80 1 2025-11-27 20:01:07.281 00:00:00.000 UDP 28.104.0.1:34364 -> 198.28.0.2:53 1 64 1 2025-11-27 20:01:07.281 00:00:00.000 UDP 28.104.0.1:37941 -> 198.28.0.2:53 1 64 1 2025-11-27 19:59:13.333 00:02:00.560 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 19:59:13.333 00:02:00.477 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 19:57:04.785 00:05:08.556 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 19:57:04.825 00:05:08.746 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 20:02:07.572 00:00:00.000 UDP 28.104.0.1:33627 -> 198.28.0.2:53 1 64 1 2025-11-27 20:02:07.572 00:00:00.000 UDP 28.104.0.1:44887 -> 198.28.0.2:53 1 64 1 2025-11-27 20:02:07.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33627 1 80 1 2025-11-27 20:02:07.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44887 1 109 1 2025-11-27 19:58:04.775 00:05:08.807 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 20:03:07.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40424 1 80 1 2025-11-27 20:03:07.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34310 1 109 1 2025-11-27 20:03:07.865 00:00:00.000 UDP 28.104.0.1:34310 -> 198.28.0.2:53 1 64 1 2025-11-27 20:03:07.865 00:00:00.000 UDP 28.104.0.1:40424 -> 198.28.0.2:53 1 64 1 2025-11-27 20:02:13.342 00:01:00.552 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 20:02:13.342 00:01:00.470 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 20:03:50.029 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:04:08.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34874 1 109 1 2025-11-27 20:04:08.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39371 1 80 1 2025-11-27 20:04:08.177 00:00:00.000 UDP 28.104.0.1:34874 -> 198.28.0.2:53 1 64 1 2025-11-27 20:04:08.177 00:00:00.000 UDP 28.104.0.1:39371 -> 198.28.0.2:53 1 64 1 2025-11-27 20:05:08.471 00:00:00.000 UDP 28.104.0.1:37047 -> 198.28.0.2:53 1 64 1 2025-11-27 20:05:08.471 00:00:00.000 UDP 28.104.0.1:54717 -> 198.28.0.2:53 1 64 1 2025-11-27 20:05:08.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54717 1 109 1 2025-11-27 20:05:08.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37047 1 80 1 2025-11-27 20:01:42.725 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2624 1 2025-11-27 20:02:04.778 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 20:06:09.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50474 1 80 1 2025-11-27 20:06:09.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34586 1 109 1 2025-11-27 20:04:13.342 00:02:00.552 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 20:06:09.406 00:00:00.000 UDP 28.104.0.1:50474 -> 198.28.0.2:53 1 64 1 2025-11-27 20:04:13.342 00:02:00.473 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 20:06:09.406 00:00:00.000 UDP 28.104.0.1:34586 -> 198.28.0.2:53 1 64 1 2025-11-27 20:03:04.787 00:05:08.555 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 20:07:09.694 00:00:00.000 UDP 28.104.0.1:46810 -> 198.28.0.2:53 1 64 1 2025-11-27 20:03:04.827 00:05:08.746 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 20:07:09.694 00:00:00.000 UDP 28.104.0.1:39751 -> 198.28.0.2:53 1 64 1 2025-11-27 20:07:09.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46810 1 80 1 2025-11-27 20:07:09.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39751 1 109 1 2025-11-27 20:07:13.343 00:01:00.554 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 20:08:10.364 00:00:00.000 UDP 28.104.0.1:36127 -> 198.28.0.2:53 1 64 1 2025-11-27 20:07:13.343 00:01:00.473 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 20:08:10.364 00:00:00.000 UDP 28.104.0.1:57836 -> 198.28.0.2:53 1 64 1 2025-11-27 20:08:10.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36127 1 80 1 2025-11-27 20:08:10.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57836 1 109 1 2025-11-27 20:04:04.778 00:05:08.806 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 20:08:50.042 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:09:10.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49736 1 80 1 2025-11-27 20:09:10.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57942 1 109 1 2025-11-27 20:09:10.652 00:00:00.000 UDP 28.104.0.1:49736 -> 198.28.0.2:53 1 64 1 2025-11-27 20:09:10.652 00:00:00.000 UDP 28.104.0.1:57942 -> 198.28.0.2:53 1 64 1 2025-11-27 20:10:10.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57958 1 80 1 2025-11-27 20:10:10.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36505 1 109 1 2025-11-27 20:10:10.948 00:00:00.000 UDP 28.104.0.1:57958 -> 198.28.0.2:53 1 64 1 2025-11-27 20:10:10.948 00:00:00.000 UDP 28.104.0.1:36505 -> 198.28.0.2:53 1 64 1 2025-11-27 20:11:11.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40971 1 109 1 2025-11-27 20:11:11.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32922 1 80 1 2025-11-27 20:09:13.343 00:02:00.476 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 20:07:02.728 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2756 1 2025-11-27 20:11:11.251 00:00:00.000 UDP 28.104.0.1:32922 -> 198.28.0.2:53 1 64 1 2025-11-27 20:11:11.251 00:00:00.000 UDP 28.104.0.1:40971 -> 198.28.0.2:53 1 64 1 2025-11-27 20:09:13.343 00:02:00.555 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 20:12:11.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53005 1 80 1 2025-11-27 20:12:11.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58202 1 109 1 2025-11-27 20:12:11.541 00:00:00.000 UDP 28.104.0.1:58202 -> 198.28.0.2:53 1 64 1 2025-11-27 20:12:11.541 00:00:00.000 UDP 28.104.0.1:53005 -> 198.28.0.2:53 1 64 1 2025-11-27 20:08:04.780 00:05:08.574 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 20:12:13.344 00:01:00.555 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 20:13:11.847 00:00:00.000 UDP 28.104.0.1:46991 -> 198.28.0.2:53 1 64 1 2025-11-27 20:13:11.847 00:00:00.000 UDP 28.104.0.1:44724 -> 198.28.0.2:53 1 64 1 2025-11-27 20:12:13.344 00:01:00.473 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 20:13:11.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46991 1 80 1 2025-11-27 20:13:11.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44724 1 109 1 2025-11-27 20:09:04.791 00:05:08.553 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 20:09:04.831 00:05:08.744 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 20:13:50.174 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:10:04.785 00:05:08.800 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 20:14:12.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41569 1 80 1 2025-11-27 20:14:12.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35253 1 109 1 2025-11-27 20:14:12.107 00:00:00.000 UDP 28.104.0.1:41569 -> 198.28.0.2:53 1 64 1 2025-11-27 20:14:12.108 00:00:00.000 UDP 28.104.0.1:35253 -> 198.28.0.2:53 1 64 1 2025-11-27 20:15:12.402 00:00:00.000 UDP 28.104.0.1:57394 -> 198.28.0.2:53 1 64 1 2025-11-27 20:15:12.403 00:00:00.000 UDP 28.104.0.1:36566 -> 198.28.0.2:53 1 64 1 2025-11-27 20:15:12.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36566 1 109 1 2025-11-27 20:15:12.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57394 1 80 1 2025-11-27 20:16:12.692 00:00:00.000 UDP 28.104.0.1:51440 -> 198.28.0.2:53 1 64 1 2025-11-27 20:16:12.692 00:00:00.000 UDP 28.104.0.1:39840 -> 198.28.0.2:53 1 64 1 2025-11-27 20:16:12.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39840 1 109 1 2025-11-27 20:16:12.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51440 1 80 1 2025-11-27 20:12:22.729 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-27 20:17:13.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50890 1 109 1 2025-11-27 20:17:13.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53082 1 80 1 2025-11-27 20:17:13.455 00:00:00.000 UDP 28.104.0.1:50890 -> 198.28.0.2:53 1 64 1 2025-11-27 20:17:13.455 00:00:00.000 UDP 28.104.0.1:53082 -> 198.28.0.2:53 1 64 1 2025-11-27 20:14:04.784 00:05:08.571 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 20:18:13.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54414 1 80 1 2025-11-27 20:18:13.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53815 1 109 1 2025-11-27 20:14:13.343 00:04:00.557 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 20:18:13.746 00:00:00.000 UDP 28.104.0.1:53815 -> 198.28.0.2:53 1 64 1 2025-11-27 20:14:13.343 00:04:00.484 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 20:18:13.746 00:00:00.000 UDP 28.104.0.1:54414 -> 198.28.0.2:53 1 64 1 2025-11-27 20:18:50.225 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:15:04.794 00:05:08.551 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 20:15:04.834 00:05:08.742 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 20:19:14.056 00:00:00.000 UDP 28.104.0.1:33822 -> 198.28.0.2:53 1 64 1 2025-11-27 20:19:14.056 00:00:00.000 UDP 28.104.0.1:59693 -> 198.28.0.2:53 1 64 1 2025-11-27 20:19:14.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33822 1 80 1 2025-11-27 20:19:14.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59693 1 109 1 2025-11-27 20:20:14.345 00:00:00.000 UDP 28.104.0.1:34366 -> 198.28.0.2:53 1 64 1 2025-11-27 20:20:14.345 00:00:00.000 UDP 28.104.0.1:47559 -> 198.28.0.2:53 1 64 1 2025-11-27 20:20:14.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47559 1 109 1 2025-11-27 20:20:14.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34366 1 80 1 2025-11-27 20:16:04.784 00:05:08.802 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 20:21:14.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37564 1 109 1 2025-11-27 20:21:14.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45325 1 80 1 2025-11-27 20:21:14.645 00:00:00.000 UDP 28.104.0.1:37564 -> 198.28.0.2:53 1 64 1 2025-11-27 20:21:14.645 00:00:00.000 UDP 28.104.0.1:45325 -> 198.28.0.2:53 1 64 1 2025-11-27 20:17:42.734 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-27 20:22:14.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55752 1 80 1 2025-11-27 20:22:14.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52598 1 109 1 2025-11-27 20:22:14.933 00:00:00.000 UDP 28.104.0.1:55752 -> 198.28.0.2:53 1 64 1 2025-11-27 20:22:14.933 00:00:00.000 UDP 28.104.0.1:52598 -> 198.28.0.2:53 1 64 1 2025-11-27 20:19:13.344 00:04:00.558 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 20:19:13.344 00:04:00.485 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 20:23:15.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39314 1 80 1 2025-11-27 20:23:15.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38548 1 109 1 2025-11-27 20:23:15.243 00:00:00.000 UDP 28.104.0.1:39314 -> 198.28.0.2:53 1 64 1 2025-11-27 20:23:15.243 00:00:00.000 UDP 28.104.0.1:38548 -> 198.28.0.2:53 1 64 1 2025-11-27 20:23:50.487 00:00:00.026 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:24:15.537 00:00:00.000 UDP 28.104.0.1:51785 -> 198.28.0.2:53 1 64 1 2025-11-27 20:24:15.537 00:00:00.000 UDP 28.104.0.1:54702 -> 198.28.0.2:53 1 64 1 2025-11-27 20:20:04.785 00:05:08.572 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 20:24:15.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54702 1 109 1 2025-11-27 20:24:15.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51785 1 80 1 2025-11-27 20:24:13.347 00:01:00.557 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 20:24:13.347 00:01:00.483 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 20:21:04.795 00:05:08.552 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 20:21:04.835 00:05:08.743 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 20:25:15.798 00:00:00.000 UDP 28.104.0.1:59121 -> 198.28.0.2:53 1 64 1 2025-11-27 20:25:15.798 00:00:00.000 UDP 28.104.0.1:37666 -> 198.28.0.2:53 1 64 1 2025-11-27 20:25:15.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37666 1 109 1 2025-11-27 20:25:15.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59121 1 80 1 2025-11-27 20:22:04.785 00:05:08.802 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 20:26:16.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52413 1 109 1 2025-11-27 20:26:16.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60270 1 80 1 2025-11-27 20:26:16.095 00:00:00.000 UDP 28.104.0.1:60270 -> 198.28.0.2:53 1 64 1 2025-11-27 20:26:16.095 00:00:00.000 UDP 28.104.0.1:52413 -> 198.28.0.2:53 1 64 1 2025-11-27 20:23:02.744 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2772 1 2025-11-27 20:27:16.393 00:00:00.000 UDP 28.104.0.1:51249 -> 198.28.0.2:53 1 64 1 2025-11-27 20:27:16.393 00:00:00.000 UDP 28.104.0.1:44520 -> 198.28.0.2:53 1 64 1 2025-11-27 20:27:16.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44520 1 109 1 2025-11-27 20:27:16.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51249 1 80 1 2025-11-27 20:26:13.347 00:02:00.557 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 20:26:13.347 00:02:00.483 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 20:28:16.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55869 1 109 1 2025-11-27 20:28:16.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58944 1 80 1 2025-11-27 20:28:16.822 00:00:00.000 UDP 28.104.0.1:58944 -> 198.28.0.2:53 1 64 1 2025-11-27 20:28:16.822 00:00:00.000 UDP 28.104.0.1:55869 -> 198.28.0.2:53 1 64 1 2025-11-27 20:28:50.558 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:29:17.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37939 1 109 1 2025-11-27 20:29:17.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45358 1 80 1 2025-11-27 20:29:17.125 00:00:00.000 UDP 28.104.0.1:45358 -> 198.28.0.2:53 1 64 1 2025-11-27 20:29:17.125 00:00:00.000 UDP 28.104.0.1:37939 -> 198.28.0.2:53 1 64 1 2025-11-27 20:29:13.347 00:01:00.557 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 20:29:13.347 00:01:00.484 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 20:26:04.787 00:05:08.572 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 20:30:17.411 00:00:00.000 UDP 28.104.0.1:35787 -> 198.28.0.2:53 1 64 1 2025-11-27 20:30:17.412 00:00:00.000 UDP 28.104.0.1:53297 -> 198.28.0.2:53 1 64 1 2025-11-27 20:30:17.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35787 1 109 1 2025-11-27 20:30:17.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53297 1 80 1 2025-11-27 20:27:04.796 00:05:08.552 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 20:31:17.705 00:00:00.000 UDP 28.104.0.1:58961 -> 198.28.0.2:53 1 64 1 2025-11-27 20:27:04.836 00:05:08.743 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 20:31:17.705 00:00:00.000 UDP 28.104.0.1:39738 -> 198.28.0.2:53 1 64 1 2025-11-27 20:31:17.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58961 1 80 1 2025-11-27 20:31:17.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39738 1 109 1 2025-11-27 20:32:18.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52452 1 109 1 2025-11-27 20:28:04.786 00:05:08.802 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 20:32:18.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37689 1 80 1 2025-11-27 20:32:18.001 00:00:00.000 UDP 28.104.0.1:52452 -> 198.28.0.2:53 1 64 1 2025-11-27 20:32:18.002 00:00:00.000 UDP 28.104.0.1:37689 -> 198.28.0.2:53 1 64 1 2025-11-27 20:28:22.753 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2600 1 2025-11-27 20:31:13.347 00:02:00.558 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 20:31:13.347 00:02:00.484 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 20:33:18.307 00:00:00.000 UDP 28.104.0.1:57877 -> 198.28.0.2:53 1 64 1 2025-11-27 20:33:18.307 00:00:00.000 UDP 28.104.0.1:52588 -> 198.28.0.2:53 1 64 1 2025-11-27 20:33:18.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57877 1 80 1 2025-11-27 20:33:18.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52588 1 109 1 2025-11-27 20:33:50.626 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:34:18.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50698 1 109 1 2025-11-27 20:34:18.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38642 1 80 1 2025-11-27 20:34:18.604 00:00:00.000 UDP 28.104.0.1:50698 -> 198.28.0.2:53 1 64 1 2025-11-27 20:34:18.604 00:00:00.000 UDP 28.104.0.1:38642 -> 198.28.0.2:53 1 64 1 2025-11-27 20:34:13.349 00:01:00.560 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 20:34:13.349 00:01:00.484 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 20:35:18.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59374 1 80 1 2025-11-27 20:35:18.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39838 1 109 1 2025-11-27 20:35:18.900 00:00:00.000 UDP 28.104.0.1:39838 -> 198.28.0.2:53 1 64 1 2025-11-27 20:35:18.900 00:00:00.000 UDP 28.104.0.1:59374 -> 198.28.0.2:53 1 64 1 2025-11-27 20:32:04.786 00:05:08.574 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 20:36:19.202 00:00:00.000 UDP 28.104.0.1:45418 -> 198.28.0.2:53 1 64 1 2025-11-27 20:36:19.202 00:00:00.000 UDP 28.104.0.1:55550 -> 198.28.0.2:53 1 64 1 2025-11-27 20:36:19.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55550 1 109 1 2025-11-27 20:36:19.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45418 1 80 1 2025-11-27 20:33:04.796 00:05:08.553 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 20:33:04.836 00:05:08.743 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 20:37:19.547 00:00:00.000 UDP 28.104.0.1:43569 -> 198.28.0.2:53 1 64 1 2025-11-27 20:37:19.547 00:00:00.000 UDP 28.104.0.1:59292 -> 198.28.0.2:53 1 64 1 2025-11-27 20:37:19.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59292 1 109 1 2025-11-27 20:37:19.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43569 1 80 1 2025-11-27 20:33:42.760 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2704 1 2025-11-27 20:36:13.349 00:02:00.560 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 20:36:13.349 00:02:00.484 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 20:34:04.787 00:05:08.802 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 20:38:19.812 00:00:00.000 UDP 28.104.0.1:40883 -> 198.28.0.2:53 1 64 1 2025-11-27 20:38:19.812 00:00:00.000 UDP 28.104.0.1:42323 -> 198.28.0.2:53 1 64 1 2025-11-27 20:38:19.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42323 1 80 1 2025-11-27 20:38:19.823 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40883 1 109 1 2025-11-27 20:38:50.873 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:39:20.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37072 1 80 1 2025-11-27 20:39:20.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54185 1 109 1 2025-11-27 20:39:20.109 00:00:00.000 UDP 28.104.0.1:37072 -> 198.28.0.2:53 1 64 1 2025-11-27 20:39:20.109 00:00:00.000 UDP 28.104.0.1:54185 -> 198.28.0.2:53 1 64 1 2025-11-27 20:39:13.349 00:01:00.484 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 20:39:13.349 00:01:00.561 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 20:40:20.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33165 1 109 1 2025-11-27 20:40:20.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59721 1 80 1 2025-11-27 20:40:20.396 00:00:00.000 UDP 28.104.0.1:59721 -> 198.28.0.2:53 1 64 1 2025-11-27 20:40:20.396 00:00:00.000 UDP 28.104.0.1:33165 -> 198.28.0.2:53 1 64 1 2025-11-27 20:41:20.700 00:00:00.000 UDP 28.104.0.1:35058 -> 198.28.0.2:53 1 64 1 2025-11-27 20:41:20.700 00:00:00.000 UDP 28.104.0.1:33223 -> 198.28.0.2:53 1 64 1 2025-11-27 20:41:20.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35058 1 80 1 2025-11-27 20:41:20.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33223 1 109 1 2025-11-27 20:38:04.788 00:05:08.572 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 20:42:21.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48737 1 109 1 2025-11-27 20:42:21.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58107 1 80 1 2025-11-27 20:42:21.053 00:00:00.000 UDP 28.104.0.1:48737 -> 198.28.0.2:53 1 64 1 2025-11-27 20:42:21.053 00:00:00.000 UDP 28.104.0.1:58107 -> 198.28.0.2:53 1 64 1 2025-11-27 20:41:13.350 00:02:00.561 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 20:41:13.350 00:02:00.483 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 20:39:02.765 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2620 1 2025-11-27 20:39:04.798 00:05:08.552 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 20:39:04.838 00:05:08.743 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 20:43:21.362 00:00:00.000 UDP 28.104.0.1:32995 -> 198.28.0.2:53 1 64 1 2025-11-27 20:43:21.362 00:00:00.000 UDP 28.104.0.1:43417 -> 198.28.0.2:53 1 64 1 2025-11-27 20:43:21.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43417 1 80 1 2025-11-27 20:43:21.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32995 1 109 1 2025-11-27 20:43:50.800 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:40:04.787 00:05:08.803 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 20:44:21.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48867 1 80 1 2025-11-27 20:44:21.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47480 1 109 1 2025-11-27 20:44:21.617 00:00:00.000 UDP 28.104.0.1:47480 -> 198.28.0.2:53 1 64 1 2025-11-27 20:44:21.617 00:00:00.000 UDP 28.104.0.1:48867 -> 198.28.0.2:53 1 64 1 2025-11-27 20:44:13.350 00:01:00.561 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 20:44:13.350 00:01:00.483 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 20:45:21.932 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39518 1 80 1 2025-11-27 20:45:21.932 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35543 1 109 1 2025-11-27 20:45:21.922 00:00:00.000 UDP 28.104.0.1:35543 -> 198.28.0.2:53 1 64 1 2025-11-27 20:45:21.922 00:00:00.000 UDP 28.104.0.1:39518 -> 198.28.0.2:53 1 64 1 2025-11-27 20:46:22.244 00:00:00.000 UDP 28.104.0.1:48200 -> 198.28.0.2:53 1 64 1 2025-11-27 20:46:22.243 00:00:00.000 UDP 28.104.0.1:46702 -> 198.28.0.2:53 1 64 1 2025-11-27 20:46:22.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46702 1 80 1 2025-11-27 20:46:22.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48200 1 109 1 2025-11-27 20:47:22.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43435 1 109 1 2025-11-27 20:47:22.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50662 1 80 1 2025-11-27 20:47:22.548 00:00:00.000 UDP 28.104.0.1:43435 -> 198.28.0.2:53 1 64 1 2025-11-27 20:47:22.548 00:00:00.000 UDP 28.104.0.1:50662 -> 198.28.0.2:53 1 64 1 2025-11-27 20:46:13.353 00:02:00.559 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 20:46:13.353 00:02:00.482 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 20:44:04.789 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 20:48:23.417 00:00:00.000 UDP 28.104.0.1:52060 -> 198.28.0.2:53 1 64 1 2025-11-27 20:48:23.416 00:00:00.000 UDP 28.104.0.1:53057 -> 198.28.0.2:53 1 64 1 2025-11-27 20:48:23.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52060 1 80 1 2025-11-27 20:48:23.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53057 1 109 1 2025-11-27 20:44:22.773 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 20:48:50.914 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:45:04.798 00:05:08.555 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 20:45:04.838 00:05:08.742 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 20:49:23.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54457 1 80 1 2025-11-27 20:49:23.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60588 1 109 1 2025-11-27 20:49:23.667 00:00:00.000 UDP 28.104.0.1:60588 -> 198.28.0.2:53 1 64 1 2025-11-27 20:49:23.667 00:00:00.000 UDP 28.104.0.1:54457 -> 198.28.0.2:53 1 64 1 2025-11-27 20:49:13.353 00:01:00.559 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 20:49:13.353 00:01:00.482 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 20:46:04.788 00:05:08.803 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 20:50:23.956 00:00:00.000 UDP 28.104.0.1:37438 -> 198.28.0.2:53 1 64 1 2025-11-27 20:50:23.956 00:00:00.000 UDP 28.104.0.1:57362 -> 198.28.0.2:53 1 64 1 2025-11-27 20:50:23.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37438 1 109 1 2025-11-27 20:50:23.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57362 1 80 1 2025-11-27 20:51:24.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45525 1 80 1 2025-11-27 20:51:24.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44615 1 109 1 2025-11-27 20:51:24.252 00:00:00.000 UDP 28.104.0.1:44615 -> 198.28.0.2:53 1 64 1 2025-11-27 20:51:24.252 00:00:00.000 UDP 28.104.0.1:45525 -> 198.28.0.2:53 1 64 1 2025-11-27 20:52:25.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34714 1 109 1 2025-11-27 20:52:25.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48983 1 80 1 2025-11-27 20:52:25.054 00:00:00.000 UDP 28.104.0.1:48983 -> 198.28.0.2:53 1 64 1 2025-11-27 20:52:25.054 00:00:00.000 UDP 28.104.0.1:34714 -> 198.28.0.2:53 1 64 1 2025-11-27 20:53:25.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51336 1 109 1 2025-11-27 20:53:25.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56699 1 80 1 2025-11-27 20:53:25.346 00:00:00.000 UDP 28.104.0.1:56699 -> 198.28.0.2:53 1 64 1 2025-11-27 20:53:25.345 00:00:00.000 UDP 28.104.0.1:51336 -> 198.28.0.2:53 1 64 1 2025-11-27 20:53:50.936 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 20:49:42.783 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2548 1 2025-11-27 20:50:04.790 00:05:08.574 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 20:54:32.638 00:00:00.000 UDP 28.104.0.1:60430 -> 198.28.0.2:53 1 64 1 2025-11-27 20:54:32.637 00:00:00.000 UDP 28.104.0.1:37881 -> 198.28.0.2:53 1 64 1 2025-11-27 20:54:32.649 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60430 1 109 1 2025-11-27 20:54:32.649 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37881 1 80 1 2025-11-27 20:51:13.354 00:04:00.559 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 20:51:13.354 00:04:00.483 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 20:51:04.800 00:05:08.555 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 20:51:04.840 00:05:08.743 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 20:55:32.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60110 1 109 1 2025-11-27 20:55:32.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38136 1 80 1 2025-11-27 20:55:32.895 00:00:00.000 UDP 28.104.0.1:38136 -> 198.28.0.2:53 1 64 1 2025-11-27 20:55:32.895 00:00:00.000 UDP 28.104.0.1:60110 -> 198.28.0.2:53 1 64 1 2025-11-27 20:52:04.790 00:05:08.802 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 20:56:33.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48000 1 80 1 2025-11-27 20:56:33.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44427 1 109 1 2025-11-27 20:56:33.206 00:00:00.000 UDP 28.104.0.1:44427 -> 198.28.0.2:53 1 64 1 2025-11-27 20:56:33.206 00:00:00.000 UDP 28.104.0.1:48000 -> 198.28.0.2:53 1 64 1 2025-11-27 20:56:13.354 00:01:00.483 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 20:57:33.505 00:00:00.000 UDP 28.104.0.1:58713 -> 198.28.0.2:53 1 64 1 2025-11-27 20:57:33.506 00:00:00.000 UDP 28.104.0.1:36684 -> 198.28.0.2:53 1 64 1 2025-11-27 20:57:33.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58713 1 80 1 2025-11-27 20:57:33.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36684 1 109 1 2025-11-27 20:58:33.807 00:00:00.000 UDP 28.104.0.1:44132 -> 198.28.0.2:53 1 64 1 2025-11-27 20:58:33.807 00:00:00.000 UDP 28.104.0.1:57816 -> 198.28.0.2:53 1 64 1 2025-11-27 20:58:33.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44132 1 109 1 2025-11-27 20:58:33.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57816 1 80 1 2025-11-27 20:58:51.073 00:00:00.036 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 344, total bytes: 94176, total packets: 1387, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-11-27 19:56:04 - 2025-11-27 20:58:51 Total flows processed: 344, passed: 344, Blocks skipped: 0, Bytes read: 35840 Sys: 0.0053s User: 0.0021s Wall: 0.0041s flows/second: 84648.9 Runtime: 0.0041s