Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 21:55:13.378 00:04:00.550 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 21:55:13.378 00:04:00.471 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-27 21:59:52.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51691 1 80 1 2025-11-27 21:59:52.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39078 1 109 1 2025-11-27 21:59:52.709 00:00:00.000 UDP 28.104.0.1:39078 -> 198.28.0.2:53 1 64 1 2025-11-27 21:59:52.709 00:00:00.000 UDP 28.104.0.1:51691 -> 198.28.0.2:53 1 64 1 2025-11-27 21:56:04.810 00:05:08.579 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 22:00:52.974 00:00:00.000 UDP 28.104.0.1:50032 -> 198.28.0.2:53 1 64 1 2025-11-27 22:00:52.974 00:00:00.000 UDP 28.104.0.1:43730 -> 198.28.0.2:53 1 64 1 2025-11-27 22:00:52.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43730 1 109 1 2025-11-27 22:00:52.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50032 1 80 1 2025-11-27 21:57:04.821 00:05:08.558 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 22:00:13.379 00:01:00.470 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 21:57:04.861 00:05:08.742 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 22:01:53.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41100 1 109 1 2025-11-27 22:01:53.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50900 1 80 1 2025-11-27 22:01:53.277 00:00:00.000 UDP 28.104.0.1:50900 -> 198.28.0.2:53 1 64 1 2025-11-27 22:01:53.277 00:00:00.000 UDP 28.104.0.1:41100 -> 198.28.0.2:53 1 64 1 2025-11-27 21:58:04.811 00:05:08.802 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 22:02:53.533 00:00:00.000 UDP 28.104.0.1:41920 -> 198.28.0.2:53 1 64 1 2025-11-27 22:02:53.533 00:00:00.000 UDP 28.104.0.1:57331 -> 198.28.0.2:53 1 64 1 2025-11-27 22:02:53.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41920 1 80 1 2025-11-27 22:02:53.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57331 1 109 1 2025-11-27 21:59:02.884 00:05:00.426 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2636 1 2025-11-27 22:03:52.410 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:03:54.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55012 1 80 1 2025-11-27 22:03:54.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59215 1 109 1 2025-11-27 22:03:54.127 00:00:00.000 UDP 28.104.0.1:55012 -> 198.28.0.2:53 1 64 1 2025-11-27 22:03:54.127 00:00:00.000 UDP 28.104.0.1:59215 -> 198.28.0.2:53 1 64 1 2025-11-27 22:00:13.380 00:04:00.551 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-27 22:02:13.381 00:02:00.470 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:04:54.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58450 1 109 1 2025-11-27 22:04:54.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60018 1 80 1 2025-11-27 22:04:54.416 00:00:00.000 UDP 28.104.0.1:58450 -> 198.28.0.2:53 1 64 1 2025-11-27 22:04:54.416 00:00:00.000 UDP 28.104.0.1:60018 -> 198.28.0.2:53 1 64 1 2025-11-27 22:05:54.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43451 1 109 1 2025-11-27 22:05:54.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59992 1 80 1 2025-11-27 22:05:54.713 00:00:00.000 UDP 28.104.0.1:59992 -> 198.28.0.2:53 1 64 1 2025-11-27 22:05:54.713 00:00:00.000 UDP 28.104.0.1:43451 -> 198.28.0.2:53 1 64 1 2025-11-27 22:02:04.812 00:05:08.578 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 22:05:13.382 00:01:00.471 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:05:13.382 00:01:00.550 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:06:55.041 00:00:00.000 UDP 28.104.0.1:45558 -> 198.28.0.2:53 1 64 1 2025-11-27 22:06:55.042 00:00:00.000 UDP 28.104.0.1:49262 -> 198.28.0.2:53 1 64 1 2025-11-27 22:06:55.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49262 1 80 1 2025-11-27 22:06:55.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45558 1 109 1 2025-11-27 22:03:04.823 00:05:08.558 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 22:03:04.865 00:05:08.740 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 22:07:56.103 00:00:00.000 UDP 28.104.0.1:44132 -> 198.28.0.2:53 1 64 1 2025-11-27 22:07:56.103 00:00:00.000 UDP 28.104.0.1:44884 -> 198.28.0.2:53 1 64 1 2025-11-27 22:07:56.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44132 1 109 1 2025-11-27 22:07:56.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44884 1 80 1 2025-11-27 22:04:04.813 00:05:08.805 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 22:04:12.892 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2580 1 2025-11-27 22:08:52.578 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:08:56.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58423 1 109 1 2025-11-27 22:08:56.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42434 1 80 1 2025-11-27 22:08:56.399 00:00:00.000 UDP 28.104.0.1:58423 -> 198.28.0.2:53 1 64 1 2025-11-27 22:08:56.399 00:00:00.000 UDP 28.104.0.1:42434 -> 198.28.0.2:53 1 64 1 2025-11-27 22:07:13.380 00:02:00.551 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 22:07:13.380 00:02:00.471 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:09:57.047 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48083 1 109 1 2025-11-27 22:09:57.047 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35863 1 80 1 2025-11-27 22:09:57.038 00:00:00.000 UDP 28.104.0.1:35863 -> 198.28.0.2:53 1 64 1 2025-11-27 22:09:57.037 00:00:00.000 UDP 28.104.0.1:48083 -> 198.28.0.2:53 1 64 1 2025-11-27 22:10:57.331 00:00:00.000 UDP 28.104.0.1:42721 -> 198.28.0.2:53 1 64 1 2025-11-27 22:10:57.331 00:00:00.000 UDP 28.104.0.1:58637 -> 198.28.0.2:53 1 64 1 2025-11-27 22:10:57.342 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58637 1 80 1 2025-11-27 22:10:57.342 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42721 1 109 1 2025-11-27 22:10:13.382 00:01:00.550 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:10:13.382 00:01:00.470 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:11:57.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49356 1 109 1 2025-11-27 22:11:57.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48696 1 80 1 2025-11-27 22:11:57.621 00:00:00.000 UDP 28.104.0.1:48696 -> 198.28.0.2:53 1 64 1 2025-11-27 22:11:57.621 00:00:00.000 UDP 28.104.0.1:49356 -> 198.28.0.2:53 1 64 1 2025-11-27 22:08:04.816 00:05:08.579 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 22:12:58.144 00:00:00.000 UDP 28.104.0.1:33469 -> 198.28.0.2:53 1 64 1 2025-11-27 22:12:58.144 00:00:00.000 UDP 28.104.0.1:52483 -> 198.28.0.2:53 1 64 1 2025-11-27 22:12:58.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52483 1 80 1 2025-11-27 22:12:58.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33469 1 109 1 2025-11-27 22:09:04.866 00:05:08.741 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 22:09:04.826 00:05:08.561 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 22:09:32.898 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 22:13:58.746 00:00:00.000 UDP 28.104.0.1:45258 -> 198.28.0.2:53 1 64 1 2025-11-27 22:13:58.746 00:00:00.000 UDP 28.104.0.1:59840 -> 198.28.0.2:53 1 64 1 2025-11-27 22:13:52.564 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:13:58.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59840 1 109 1 2025-11-27 22:13:58.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45258 1 80 1 2025-11-27 22:12:13.382 00:02:00.550 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 22:12:13.382 00:02:00.470 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:10:04.816 00:05:08.802 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 22:14:59.054 00:00:00.000 UDP 28.104.0.1:47683 -> 198.28.0.2:53 1 64 1 2025-11-27 22:14:59.054 00:00:00.000 UDP 28.104.0.1:56643 -> 198.28.0.2:53 1 64 1 2025-11-27 22:14:59.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47683 1 109 1 2025-11-27 22:14:59.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56643 1 80 1 2025-11-27 22:16:00.045 00:00:00.000 UDP 28.104.0.1:39383 -> 198.28.0.2:53 1 64 1 2025-11-27 22:16:00.045 00:00:00.000 UDP 28.104.0.1:56591 -> 198.28.0.2:53 1 64 1 2025-11-27 22:16:00.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39383 1 109 1 2025-11-27 22:16:00.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56591 1 80 1 2025-11-27 22:15:13.389 00:01:00.464 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:15:13.389 00:01:00.545 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:17:00.346 00:00:00.000 UDP 28.104.0.1:53080 -> 198.28.0.2:53 1 64 1 2025-11-27 22:17:00.346 00:00:00.000 UDP 28.104.0.1:60177 -> 198.28.0.2:53 1 64 1 2025-11-27 22:17:00.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53080 1 80 1 2025-11-27 22:17:00.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60177 1 109 1 2025-11-27 22:18:00.673 00:00:00.000 UDP 28.104.0.1:57835 -> 198.28.0.2:53 1 64 1 2025-11-27 22:18:00.674 00:00:00.000 UDP 28.104.0.1:46846 -> 198.28.0.2:53 1 64 1 2025-11-27 22:18:00.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57835 1 109 1 2025-11-27 22:18:00.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46846 1 80 1 2025-11-27 22:14:04.815 00:05:08.583 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 22:18:52.802 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:14:52.903 00:05:01.457 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2400 1 2025-11-27 22:19:00.970 00:00:00.000 UDP 28.104.0.1:37361 -> 198.28.0.2:53 1 64 1 2025-11-27 22:19:00.970 00:00:00.000 UDP 28.104.0.1:59465 -> 198.28.0.2:53 1 64 1 2025-11-27 22:19:00.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37361 1 80 1 2025-11-27 22:19:00.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59465 1 109 1 2025-11-27 22:17:13.388 00:02:00.546 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 22:17:13.388 00:02:00.464 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:15:04.828 00:05:08.562 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 22:15:04.868 00:05:08.743 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 22:20:01.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44894 1 80 1 2025-11-27 22:20:01.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54453 1 109 1 2025-11-27 22:20:01.273 00:00:00.000 UDP 28.104.0.1:54453 -> 198.28.0.2:53 1 64 1 2025-11-27 22:20:01.273 00:00:00.000 UDP 28.104.0.1:44894 -> 198.28.0.2:53 1 64 1 2025-11-27 22:16:04.816 00:05:08.803 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 22:21:01.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38426 1 80 1 2025-11-27 22:21:01.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60527 1 109 1 2025-11-27 22:21:01.577 00:00:00.000 UDP 28.104.0.1:60527 -> 198.28.0.2:53 1 64 1 2025-11-27 22:21:01.577 00:00:00.000 UDP 28.104.0.1:38426 -> 198.28.0.2:53 1 64 1 2025-11-27 22:20:13.389 00:01:00.546 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:20:13.389 00:01:00.468 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:22:01.869 00:00:00.000 UDP 28.104.0.1:38233 -> 198.28.0.2:53 1 64 1 2025-11-27 22:22:01.869 00:00:00.000 UDP 28.104.0.1:37398 -> 198.28.0.2:53 1 64 1 2025-11-27 22:22:01.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37398 1 109 1 2025-11-27 22:22:01.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38233 1 80 1 2025-11-27 22:23:02.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34439 1 109 1 2025-11-27 22:23:02.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57102 1 80 1 2025-11-27 22:23:02.180 00:00:00.000 UDP 28.104.0.1:34439 -> 198.28.0.2:53 1 64 1 2025-11-27 22:23:02.179 00:00:00.000 UDP 28.104.0.1:57102 -> 198.28.0.2:53 1 64 1 2025-11-27 22:23:52.739 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:24:02.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57376 1 80 1 2025-11-27 22:24:02.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60422 1 109 1 2025-11-27 22:24:02.437 00:00:00.000 UDP 28.104.0.1:57376 -> 198.28.0.2:53 1 64 1 2025-11-27 22:24:02.438 00:00:00.000 UDP 28.104.0.1:60422 -> 198.28.0.2:53 1 64 1 2025-11-27 22:22:13.388 00:02:00.546 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 22:22:13.388 00:02:00.469 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:20:02.909 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2840 1 2025-11-27 22:20:04.817 00:05:08.582 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 22:25:02.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37602 1 109 1 2025-11-27 22:25:02.713 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36337 1 80 1 2025-11-27 22:25:02.703 00:00:00.000 UDP 28.104.0.1:36337 -> 198.28.0.2:53 1 64 1 2025-11-27 22:25:02.704 00:00:00.000 UDP 28.104.0.1:37602 -> 198.28.0.2:53 1 64 1 2025-11-27 22:21:04.827 00:05:08.563 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 22:21:04.867 00:05:08.745 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 22:26:03.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41121 1 109 1 2025-11-27 22:26:03.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33833 1 80 1 2025-11-27 22:26:03.002 00:00:00.000 UDP 28.104.0.1:33833 -> 198.28.0.2:53 1 64 1 2025-11-27 22:26:03.002 00:00:00.000 UDP 28.104.0.1:41121 -> 198.28.0.2:53 1 64 1 2025-11-27 22:25:13.389 00:01:00.546 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:25:13.389 00:01:00.470 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:22:04.818 00:05:08.806 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 22:27:03.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54496 1 109 1 2025-11-27 22:27:03.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57600 1 80 1 2025-11-27 22:27:03.308 00:00:00.000 UDP 28.104.0.1:54496 -> 198.28.0.2:53 1 64 1 2025-11-27 22:27:03.309 00:00:00.000 UDP 28.104.0.1:57600 -> 198.28.0.2:53 1 64 1 2025-11-27 22:28:03.601 00:00:00.000 UDP 28.104.0.1:60042 -> 198.28.0.2:53 1 64 1 2025-11-27 22:28:03.601 00:00:00.000 UDP 28.104.0.1:46465 -> 198.28.0.2:53 1 64 1 2025-11-27 22:28:03.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60042 1 80 1 2025-11-27 22:28:03.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46465 1 109 1 2025-11-27 22:28:52.879 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:29:03.920 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52979 1 80 1 2025-11-27 22:29:03.920 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36431 1 109 1 2025-11-27 22:29:03.911 00:00:00.000 UDP 28.104.0.1:36431 -> 198.28.0.2:53 1 64 1 2025-11-27 22:29:03.911 00:00:00.000 UDP 28.104.0.1:52979 -> 198.28.0.2:53 1 64 1 2025-11-27 22:27:13.390 00:02:00.546 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 22:27:13.390 00:02:00.472 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:25:22.914 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-27 22:30:04.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56614 1 80 1 2025-11-27 22:30:04.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43577 1 109 1 2025-11-27 22:30:04.184 00:00:00.000 UDP 28.104.0.1:43577 -> 198.28.0.2:53 1 64 1 2025-11-27 22:30:04.184 00:00:00.000 UDP 28.104.0.1:56614 -> 198.28.0.2:53 1 64 1 2025-11-27 22:26:04.817 00:05:08.584 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 22:31:04.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45175 1 109 1 2025-11-27 22:31:04.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43205 1 80 1 2025-11-27 22:31:04.432 00:00:00.000 UDP 28.104.0.1:45175 -> 198.28.0.2:53 1 64 1 2025-11-27 22:31:04.431 00:00:00.000 UDP 28.104.0.1:43205 -> 198.28.0.2:53 1 64 1 2025-11-27 22:30:13.391 00:01:00.473 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:30:13.391 00:01:00.545 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:27:04.828 00:05:08.563 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 22:27:04.868 00:05:08.745 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 22:32:04.725 00:00:00.000 UDP 28.104.0.1:36214 -> 198.28.0.2:53 1 64 1 2025-11-27 22:32:04.725 00:00:00.000 UDP 28.104.0.1:48709 -> 198.28.0.2:53 1 64 1 2025-11-27 22:32:04.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36214 1 109 1 2025-11-27 22:32:04.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48709 1 80 1 2025-11-27 22:28:04.818 00:05:08.805 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 22:33:05.044 00:00:00.000 UDP 28.104.0.1:42160 -> 198.28.0.2:53 1 64 1 2025-11-27 22:33:05.044 00:00:00.000 UDP 28.104.0.1:44286 -> 198.28.0.2:53 1 64 1 2025-11-27 22:33:05.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42160 1 80 1 2025-11-27 22:33:05.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44286 1 109 1 2025-11-27 22:32:13.391 00:01:00.545 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:32:13.391 00:01:00.473 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:33:53.630 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:34:05.339 00:00:00.000 UDP 28.104.0.1:33347 -> 198.28.0.2:53 1 64 1 2025-11-27 22:34:05.339 00:00:00.000 UDP 28.104.0.1:48208 -> 198.28.0.2:53 1 64 1 2025-11-27 22:34:05.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33347 1 80 1 2025-11-27 22:34:05.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48208 1 109 1 2025-11-27 22:30:42.925 00:05:00.841 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2752 1 2025-11-27 22:35:05.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34895 1 109 1 2025-11-27 22:35:05.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58228 1 80 1 2025-11-27 22:35:05.631 00:00:00.000 UDP 28.104.0.1:58228 -> 198.28.0.2:53 1 64 1 2025-11-27 22:35:05.631 00:00:00.000 UDP 28.104.0.1:34895 -> 198.28.0.2:53 1 64 1 2025-11-27 22:36:05.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54763 1 109 1 2025-11-27 22:36:05.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38699 1 80 1 2025-11-27 22:36:05.930 00:00:00.000 UDP 28.104.0.1:54763 -> 198.28.0.2:53 1 64 1 2025-11-27 22:36:05.930 00:00:00.000 UDP 28.104.0.1:38699 -> 198.28.0.2:53 1 64 1 2025-11-27 22:34:13.392 00:02:00.546 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 22:34:13.392 00:02:00.473 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:32:04.820 00:05:08.582 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 22:37:06.226 00:00:00.000 UDP 28.104.0.1:42774 -> 198.28.0.2:53 1 64 1 2025-11-27 22:37:06.226 00:00:00.000 UDP 28.104.0.1:56155 -> 198.28.0.2:53 1 64 1 2025-11-27 22:37:06.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56155 1 109 1 2025-11-27 22:37:06.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42774 1 80 1 2025-11-27 22:33:04.829 00:05:08.570 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 22:33:04.869 00:05:08.746 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 22:38:06.841 00:00:00.000 UDP 28.104.0.1:42287 -> 198.28.0.2:53 1 64 1 2025-11-27 22:38:06.841 00:00:00.000 UDP 28.104.0.1:47903 -> 198.28.0.2:53 1 64 1 2025-11-27 22:38:06.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47903 1 109 1 2025-11-27 22:38:06.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42287 1 80 1 2025-11-27 22:37:13.392 00:01:00.547 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:37:13.392 00:01:00.473 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:34:04.820 00:05:08.806 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 22:38:53.042 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:39:07.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58542 1 80 1 2025-11-27 22:39:07.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60812 1 109 1 2025-11-27 22:39:07.136 00:00:00.000 UDP 28.104.0.1:60812 -> 198.28.0.2:53 1 64 1 2025-11-27 22:39:07.136 00:00:00.000 UDP 28.104.0.1:58542 -> 198.28.0.2:53 1 64 1 2025-11-27 22:35:52.932 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-27 22:40:07.427 00:00:00.000 UDP 28.104.0.1:40751 -> 198.28.0.2:53 1 64 1 2025-11-27 22:40:07.427 00:00:00.000 UDP 28.104.0.1:52226 -> 198.28.0.2:53 1 64 1 2025-11-27 22:40:07.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40751 1 109 1 2025-11-27 22:40:07.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52226 1 80 1 2025-11-27 22:41:07.716 00:00:00.000 UDP 28.104.0.1:55944 -> 198.28.0.2:53 1 64 1 2025-11-27 22:41:07.716 00:00:00.000 UDP 28.104.0.1:50987 -> 198.28.0.2:53 1 64 1 2025-11-27 22:41:07.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50987 1 109 1 2025-11-27 22:41:07.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55944 1 80 1 2025-11-27 22:39:13.392 00:02:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:39:13.392 00:02:00.547 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 22:42:08.028 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50139 1 80 1 2025-11-27 22:42:08.028 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43057 1 109 1 2025-11-27 22:42:08.019 00:00:00.000 UDP 28.104.0.1:43057 -> 198.28.0.2:53 1 64 1 2025-11-27 22:42:08.019 00:00:00.000 UDP 28.104.0.1:50139 -> 198.28.0.2:53 1 64 1 2025-11-27 22:38:04.821 00:05:08.582 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 22:43:08.273 00:00:00.000 UDP 28.104.0.1:46634 -> 198.28.0.2:53 1 64 1 2025-11-27 22:43:08.274 00:00:00.000 UDP 28.104.0.1:48559 -> 198.28.0.2:53 1 64 1 2025-11-27 22:43:08.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46634 1 109 1 2025-11-27 22:43:08.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48559 1 80 1 2025-11-27 22:42:13.395 00:01:00.546 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:42:13.395 00:01:00.473 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:39:04.870 00:05:08.747 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 22:39:04.830 00:05:08.562 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 22:43:53.255 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:44:08.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54108 1 109 1 2025-11-27 22:44:08.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46510 1 80 1 2025-11-27 22:44:08.573 00:00:00.000 UDP 28.104.0.1:54108 -> 198.28.0.2:53 1 64 1 2025-11-27 22:44:08.573 00:00:00.000 UDP 28.104.0.1:46510 -> 198.28.0.2:53 1 64 1 2025-11-27 22:40:04.821 00:05:08.807 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 22:45:08.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37523 1 80 1 2025-11-27 22:45:08.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41134 1 109 1 2025-11-27 22:45:08.872 00:00:00.000 UDP 28.104.0.1:37523 -> 198.28.0.2:53 1 64 1 2025-11-27 22:45:08.872 00:00:00.000 UDP 28.104.0.1:41134 -> 198.28.0.2:53 1 64 1 2025-11-27 22:41:12.939 00:05:10.044 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-27 22:44:13.393 00:02:00.547 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 22:46:09.198 00:00:00.000 UDP 28.104.0.1:54269 -> 198.28.0.2:53 1 64 1 2025-11-27 22:44:13.393 00:02:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:46:09.198 00:00:00.000 UDP 28.104.0.1:46421 -> 198.28.0.2:53 1 64 1 2025-11-27 22:46:09.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54269 1 109 1 2025-11-27 22:46:09.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46421 1 80 1 2025-11-27 22:47:09.454 00:00:00.000 UDP 28.104.0.1:50993 -> 198.28.0.2:53 1 64 1 2025-11-27 22:47:09.454 00:00:00.000 UDP 28.104.0.1:36053 -> 198.28.0.2:53 1 64 1 2025-11-27 22:47:09.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50993 1 80 1 2025-11-27 22:47:09.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36053 1 109 1 2025-11-27 22:48:09.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37590 1 80 1 2025-11-27 22:44:04.823 00:05:08.583 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 22:48:09.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37603 1 109 1 2025-11-27 22:47:13.393 00:01:00.547 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:48:09.743 00:00:00.000 UDP 28.104.0.1:37603 -> 198.28.0.2:53 1 64 1 2025-11-27 22:47:13.393 00:01:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:48:09.743 00:00:00.000 UDP 28.104.0.1:37590 -> 198.28.0.2:53 1 64 1 2025-11-27 22:48:53.107 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:49:10.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55120 1 109 1 2025-11-27 22:49:10.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38198 1 80 1 2025-11-27 22:49:10.058 00:00:00.000 UDP 28.104.0.1:55120 -> 198.28.0.2:53 1 64 1 2025-11-27 22:49:10.058 00:00:00.000 UDP 28.104.0.1:38198 -> 198.28.0.2:53 1 64 1 2025-11-27 22:45:04.832 00:05:08.563 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 22:45:04.872 00:05:08.747 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 22:50:10.352 00:00:00.000 UDP 28.104.0.1:58115 -> 198.28.0.2:53 1 64 1 2025-11-27 22:50:10.353 00:00:00.000 UDP 28.104.0.1:45306 -> 198.28.0.2:53 1 64 1 2025-11-27 22:50:10.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45306 1 80 1 2025-11-27 22:50:10.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58115 1 109 1 2025-11-27 22:46:04.821 00:05:08.807 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 22:46:32.943 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2916 1 2025-11-27 22:51:10.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53978 1 109 1 2025-11-27 22:51:10.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47150 1 80 1 2025-11-27 22:49:13.395 00:02:00.546 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 22:51:10.643 00:00:00.000 UDP 28.104.0.1:53978 -> 198.28.0.2:53 1 64 1 2025-11-27 22:51:10.643 00:00:00.000 UDP 28.104.0.1:47150 -> 198.28.0.2:53 1 64 1 2025-11-27 22:49:13.395 00:02:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:52:10.933 00:00:00.000 UDP 28.104.0.1:58185 -> 198.28.0.2:53 1 64 1 2025-11-27 22:52:10.933 00:00:00.000 UDP 28.104.0.1:47634 -> 198.28.0.2:53 1 64 1 2025-11-27 22:52:10.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47634 1 80 1 2025-11-27 22:52:10.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58185 1 109 1 2025-11-27 22:52:13.394 00:01:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:53:11.251 00:00:00.000 UDP 28.104.0.1:45426 -> 198.28.0.2:53 1 64 1 2025-11-27 22:52:13.394 00:01:00.550 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:53:11.251 00:00:00.000 UDP 28.104.0.1:56221 -> 198.28.0.2:53 1 64 1 2025-11-27 22:53:11.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45426 1 80 1 2025-11-27 22:53:11.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56221 1 109 1 2025-11-27 22:53:53.404 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 22:54:11.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58709 1 109 1 2025-11-27 22:50:04.824 00:05:08.583 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 22:54:11.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45872 1 80 1 2025-11-27 22:54:11.549 00:00:00.000 UDP 28.104.0.1:58709 -> 198.28.0.2:53 1 64 1 2025-11-27 22:54:11.549 00:00:00.000 UDP 28.104.0.1:45872 -> 198.28.0.2:53 1 64 1 2025-11-27 22:51:04.872 00:05:08.749 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 22:55:11.848 00:00:00.000 UDP 28.104.0.1:39856 -> 198.28.0.2:53 1 64 1 2025-11-27 22:51:04.832 00:05:08.563 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 22:55:11.848 00:00:00.000 UDP 28.104.0.1:44304 -> 198.28.0.2:53 1 64 1 2025-11-27 22:55:11.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44304 1 80 1 2025-11-27 22:55:11.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39856 1 109 1 2025-11-27 22:51:52.947 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2520 1 2025-11-27 22:56:12.177 00:00:00.000 UDP 28.104.0.1:56599 -> 198.28.0.2:53 1 64 1 2025-11-27 22:54:13.396 00:02:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-27 22:54:13.396 00:02:00.549 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-27 22:56:12.177 00:00:00.000 UDP 28.104.0.1:39380 -> 198.28.0.2:53 1 64 1 2025-11-27 22:56:12.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56599 1 109 1 2025-11-27 22:56:12.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39380 1 80 1 2025-11-27 22:52:04.823 00:05:08.809 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 22:57:12.483 00:00:00.000 UDP 28.104.0.1:58197 -> 198.28.0.2:53 1 64 1 2025-11-27 22:57:12.483 00:00:00.000 UDP 28.104.0.1:44440 -> 198.28.0.2:53 1 64 1 2025-11-27 22:57:12.494 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44440 1 109 1 2025-11-27 22:57:12.494 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58197 1 80 1 2025-11-27 22:57:13.396 00:01:00.549 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-27 22:58:12.786 00:00:00.000 UDP 28.104.0.1:39499 -> 198.28.0.2:53 1 64 1 2025-11-27 22:58:12.786 00:00:00.000 UDP 28.104.0.1:42966 -> 198.28.0.2:53 1 64 1 2025-11-27 22:57:13.396 00:01:00.474 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-27 22:58:12.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39499 1 80 1 2025-11-27 22:58:12.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42966 1 109 1 2025-11-27 22:58:53.454 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 348, total bytes: 95171, total packets: 1405, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-11-27 21:55:13 - 2025-11-27 22:58:53 Total flows processed: 348, passed: 348, Blocks skipped: 0, Bytes read: 36256 Sys: 0.0054s User: 0.0021s Wall: 0.0041s flows/second: 85188.4 Runtime: 0.0041s