Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 00:58:54.687 00:00:00.000 UDP 28.104.0.1:34238 -> 198.28.0.2:53 1 64 1 2025-11-28 00:58:54.687 00:00:00.000 UDP 28.104.0.1:51017 -> 198.28.0.2:53 1 64 1 2025-11-28 00:58:55.979 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 00:58:54.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34238 1 80 1 2025-11-28 00:58:54.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51017 1 109 1 2025-11-28 00:57:13.469 00:02:00.519 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-28 00:57:13.469 00:02:00.449 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-28 00:59:54.938 00:00:00.000 UDP 28.104.0.1:38367 -> 198.28.0.2:53 1 64 1 2025-11-28 00:59:54.938 00:00:00.000 UDP 28.104.0.1:52263 -> 198.28.0.2:53 1 64 1 2025-11-28 00:59:54.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38367 1 109 1 2025-11-28 00:59:54.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52263 1 80 1 2025-11-28 00:56:04.852 00:05:08.627 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-28 01:00:55.240 00:00:00.000 UDP 28.104.0.1:44557 -> 198.28.0.2:53 1 64 1 2025-11-28 01:00:55.240 00:00:00.000 UDP 28.104.0.1:33616 -> 198.28.0.2:53 1 64 1 2025-11-28 01:00:55.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44557 1 80 1 2025-11-28 01:00:55.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33616 1 109 1 2025-11-28 01:00:13.469 00:01:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-28 01:00:13.469 00:01:00.449 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 00:57:04.902 00:05:08.755 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-28 00:57:04.862 00:05:08.606 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-28 01:01:55.529 00:00:00.000 UDP 28.104.0.1:38228 -> 198.28.0.2:53 1 64 1 2025-11-28 01:01:55.529 00:00:00.000 UDP 28.104.0.1:55291 -> 198.28.0.2:53 1 64 1 2025-11-28 01:01:55.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38228 1 109 1 2025-11-28 01:01:55.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55291 1 80 1 2025-11-28 00:58:04.852 00:05:08.815 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-28 01:02:55.827 00:00:00.000 UDP 28.104.0.1:48756 -> 198.28.0.2:53 1 64 1 2025-11-28 01:02:55.826 00:00:00.000 UDP 28.104.0.1:44083 -> 198.28.0.2:53 1 64 1 2025-11-28 01:02:55.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44083 1 80 1 2025-11-28 01:02:55.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48756 1 109 1 2025-11-28 01:02:13.468 00:01:00.450 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 00:59:23.133 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-28 01:03:56.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34965 1 80 1 2025-11-28 01:03:56.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34025 1 109 1 2025-11-28 01:03:55.848 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:03:56.173 00:00:00.000 UDP 28.104.0.1:34965 -> 198.28.0.2:53 1 64 1 2025-11-28 01:03:56.173 00:00:00.000 UDP 28.104.0.1:34025 -> 198.28.0.2:53 1 64 1 2025-11-28 01:02:13.468 00:02:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-28 01:04:13.469 00:00:00.449 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 123 1 2025-11-28 01:04:56.466 00:00:00.000 UDP 28.104.0.1:55968 -> 198.28.0.2:53 1 64 1 2025-11-28 01:04:56.466 00:00:00.000 UDP 28.104.0.1:57363 -> 198.28.0.2:53 1 64 1 2025-11-28 01:04:56.477 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57363 1 109 1 2025-11-28 01:04:56.477 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55968 1 80 1 2025-11-28 01:05:56.719 00:00:00.000 UDP 28.104.0.1:55288 -> 198.28.0.2:53 1 64 1 2025-11-28 01:05:56.720 00:00:00.000 UDP 28.104.0.1:54303 -> 198.28.0.2:53 1 64 1 2025-11-28 01:05:56.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55288 1 109 1 2025-11-28 01:05:56.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54303 1 80 1 2025-11-28 01:05:13.469 00:01:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-28 01:05:13.469 00:01:00.449 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:02:04.853 00:05:08.629 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-28 01:06:57.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37785 1 109 1 2025-11-28 01:06:57.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33132 1 80 1 2025-11-28 01:06:57.041 00:00:00.000 UDP 28.104.0.1:33132 -> 198.28.0.2:53 1 64 1 2025-11-28 01:06:57.041 00:00:00.000 UDP 28.104.0.1:37785 -> 198.28.0.2:53 1 64 1 2025-11-28 01:03:04.863 00:05:08.609 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-28 01:03:04.902 00:05:08.766 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-28 01:07:57.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56816 1 109 1 2025-11-28 01:07:57.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54628 1 80 1 2025-11-28 01:07:57.294 00:00:00.000 UDP 28.104.0.1:56816 -> 198.28.0.2:53 1 64 1 2025-11-28 01:07:57.294 00:00:00.000 UDP 28.104.0.1:54628 -> 198.28.0.2:53 1 64 1 2025-11-28 01:07:13.471 00:01:00.447 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:07:13.472 00:01:00.519 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-28 01:04:04.853 00:05:08.826 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-28 01:08:56.056 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:08:57.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48953 1 109 1 2025-11-28 01:08:57.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59182 1 80 1 2025-11-28 01:04:43.137 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2452 1 2025-11-28 01:08:57.585 00:00:00.000 UDP 28.104.0.1:48953 -> 198.28.0.2:53 1 64 1 2025-11-28 01:08:57.585 00:00:00.000 UDP 28.104.0.1:59182 -> 198.28.0.2:53 1 64 1 2025-11-28 01:09:13.472 00:00:00.447 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 123 1 2025-11-28 01:09:13.472 00:00:00.520 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-11-28 01:09:57.888 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56658 1 109 1 2025-11-28 01:09:57.887 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60756 1 80 1 2025-11-28 01:09:57.877 00:00:00.000 UDP 28.104.0.1:60756 -> 198.28.0.2:53 1 64 1 2025-11-28 01:09:57.877 00:00:00.000 UDP 28.104.0.1:56658 -> 198.28.0.2:53 1 64 1 2025-11-28 01:10:58.178 00:00:00.000 UDP 28.104.0.1:46618 -> 198.28.0.2:53 1 64 1 2025-11-28 01:10:58.178 00:00:00.000 UDP 28.104.0.1:43291 -> 198.28.0.2:53 1 64 1 2025-11-28 01:10:58.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43291 1 109 1 2025-11-28 01:10:58.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46618 1 80 1 2025-11-28 01:10:13.473 00:01:00.519 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-28 01:10:13.473 00:01:00.446 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:11:58.990 00:00:00.000 UDP 28.104.0.1:33867 -> 198.28.0.2:53 1 64 1 2025-11-28 01:11:58.989 00:00:00.000 UDP 28.104.0.1:58229 -> 198.28.0.2:53 1 64 1 2025-11-28 01:11:59.000 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58229 1 80 1 2025-11-28 01:11:59.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33867 1 109 1 2025-11-28 01:08:04.853 00:05:08.631 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-28 01:12:59.306 00:00:00.000 UDP 28.104.0.1:48078 -> 198.28.0.2:53 1 64 1 2025-11-28 01:12:59.306 00:00:00.000 UDP 28.104.0.1:53264 -> 198.28.0.2:53 1 64 1 2025-11-28 01:12:59.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53264 1 80 1 2025-11-28 01:12:59.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48078 1 109 1 2025-11-28 01:12:13.474 00:01:00.519 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-28 01:12:13.474 00:01:00.446 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:09:04.865 00:05:08.610 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-28 01:09:04.905 00:05:08.765 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-28 01:13:56.580 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:13:59.609 00:00:00.000 UDP 28.104.0.1:50417 -> 198.28.0.2:53 1 64 1 2025-11-28 01:13:59.609 00:00:00.000 UDP 28.104.0.1:52072 -> 198.28.0.2:53 1 64 1 2025-11-28 01:13:59.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52072 1 80 1 2025-11-28 01:13:59.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50417 1 109 1 2025-11-28 01:10:03.142 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2800 1 2025-11-28 01:10:04.854 00:05:08.826 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-28 01:14:59.915 00:00:00.000 UDP 28.104.0.1:60758 -> 198.28.0.2:53 1 64 1 2025-11-28 01:14:59.914 00:00:00.000 UDP 28.104.0.1:55809 -> 198.28.0.2:53 1 64 1 2025-11-28 01:14:59.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55809 1 109 1 2025-11-28 01:14:59.925 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60758 1 80 1 2025-11-28 01:16:00.233 00:00:00.000 UDP 28.104.0.1:49929 -> 198.28.0.2:53 1 64 1 2025-11-28 01:16:00.233 00:00:00.000 UDP 28.104.0.1:35122 -> 198.28.0.2:53 1 64 1 2025-11-28 01:16:00.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49929 1 80 1 2025-11-28 01:16:00.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35122 1 109 1 2025-11-28 01:14:13.474 00:02:00.519 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-28 01:14:13.474 00:02:00.447 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-28 01:17:00.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33425 1 80 1 2025-11-28 01:17:00.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56306 1 109 1 2025-11-28 01:17:00.538 00:00:00.000 UDP 28.104.0.1:56306 -> 198.28.0.2:53 1 64 1 2025-11-28 01:17:00.538 00:00:00.000 UDP 28.104.0.1:33425 -> 198.28.0.2:53 1 64 1 2025-11-28 01:18:00.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35020 1 80 1 2025-11-28 01:18:00.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52232 1 109 1 2025-11-28 01:18:00.843 00:00:00.000 UDP 28.104.0.1:52232 -> 198.28.0.2:53 1 64 1 2025-11-28 01:18:00.843 00:00:00.000 UDP 28.104.0.1:35020 -> 198.28.0.2:53 1 64 1 2025-11-28 01:17:13.475 00:01:00.518 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-28 01:17:13.475 00:01:00.450 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:14:04.857 00:05:08.628 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-28 01:18:56.341 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:19:01.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34161 1 80 1 2025-11-28 01:19:01.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42297 1 109 1 2025-11-28 01:19:01.098 00:00:00.000 UDP 28.104.0.1:34161 -> 198.28.0.2:53 1 64 1 2025-11-28 01:19:01.098 00:00:00.000 UDP 28.104.0.1:42297 -> 198.28.0.2:53 1 64 1 2025-11-28 01:15:04.867 00:05:08.608 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-28 01:15:04.907 00:05:08.765 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-28 01:15:23.148 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-11-28 01:20:01.393 00:00:00.000 UDP 28.104.0.1:60403 -> 198.28.0.2:53 1 64 1 2025-11-28 01:20:01.394 00:00:00.000 UDP 28.104.0.1:60698 -> 198.28.0.2:53 1 64 1 2025-11-28 01:20:01.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60698 1 109 1 2025-11-28 01:20:01.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60403 1 80 1 2025-11-28 01:16:04.857 00:05:08.825 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-28 01:21:01.917 00:00:00.000 UDP 28.104.0.1:54956 -> 198.28.0.2:53 1 64 1 2025-11-28 01:21:01.918 00:00:00.000 UDP 28.104.0.1:55019 -> 198.28.0.2:53 1 64 1 2025-11-28 01:21:01.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55019 1 109 1 2025-11-28 01:21:01.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54956 1 80 1 2025-11-28 01:19:13.475 00:02:00.450 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-28 01:19:13.475 00:02:00.518 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-28 01:22:02.232 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48309 1 109 1 2025-11-28 01:22:02.231 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40019 1 80 1 2025-11-28 01:22:02.221 00:00:00.000 UDP 28.104.0.1:40019 -> 198.28.0.2:53 1 64 1 2025-11-28 01:22:02.221 00:00:00.000 UDP 28.104.0.1:48309 -> 198.28.0.2:53 1 64 1 2025-11-28 01:23:02.475 00:00:00.000 UDP 28.104.0.1:59466 -> 198.28.0.2:53 1 64 1 2025-11-28 01:23:02.476 00:00:00.000 UDP 28.104.0.1:45759 -> 198.28.0.2:53 1 64 1 2025-11-28 01:23:02.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45759 1 80 1 2025-11-28 01:23:02.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59466 1 109 1 2025-11-28 01:22:13.475 00:01:00.451 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:22:13.475 00:01:00.518 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-28 01:23:56.582 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:24:02.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38403 1 109 1 2025-11-28 01:24:02.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48160 1 80 1 2025-11-28 01:24:02.769 00:00:00.000 UDP 28.104.0.1:48160 -> 198.28.0.2:53 1 64 1 2025-11-28 01:24:02.769 00:00:00.000 UDP 28.104.0.1:38403 -> 198.28.0.2:53 1 64 1 2025-11-28 01:20:04.859 00:05:08.628 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-28 01:20:43.149 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2876 1 2025-11-28 01:25:03.084 00:00:00.000 UDP 28.104.0.1:38160 -> 198.28.0.2:53 1 64 1 2025-11-28 01:25:03.084 00:00:00.000 UDP 28.104.0.1:59758 -> 198.28.0.2:53 1 64 1 2025-11-28 01:25:03.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38160 1 80 1 2025-11-28 01:25:03.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59758 1 109 1 2025-11-28 01:21:04.868 00:05:08.608 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-28 01:21:04.908 00:05:08.764 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-28 01:26:04.425 00:00:00.000 UDP 28.104.0.1:45851 -> 198.28.0.2:53 1 64 1 2025-11-28 01:26:04.425 00:00:00.000 UDP 28.104.0.1:49076 -> 198.28.0.2:53 1 64 1 2025-11-28 01:26:04.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45851 1 80 1 2025-11-28 01:26:04.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49076 1 109 1 2025-11-28 01:22:04.860 00:05:08.822 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-28 01:24:13.476 00:02:00.517 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-28 01:24:13.476 00:02:00.453 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-28 01:27:04.678 00:00:00.000 UDP 28.104.0.1:39912 -> 198.28.0.2:53 1 64 1 2025-11-28 01:27:04.678 00:00:00.000 UDP 28.104.0.1:54494 -> 198.28.0.2:53 1 64 1 2025-11-28 01:27:04.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54494 1 80 1 2025-11-28 01:27:04.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39912 1 109 1 2025-11-28 01:28:04.971 00:00:00.000 UDP 28.104.0.1:56154 -> 198.28.0.2:53 1 64 1 2025-11-28 01:28:04.971 00:00:00.000 UDP 28.104.0.1:48090 -> 198.28.0.2:53 1 64 1 2025-11-28 01:28:04.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56154 1 80 1 2025-11-28 01:28:04.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48090 1 109 1 2025-11-28 01:27:13.477 00:01:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:27:13.477 00:01:00.519 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-28 01:28:56.571 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:29:05.268 00:00:00.000 UDP 28.104.0.1:52375 -> 198.28.0.2:53 1 64 1 2025-11-28 01:29:05.268 00:00:00.000 UDP 28.104.0.1:41865 -> 198.28.0.2:53 1 64 1 2025-11-28 01:29:05.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41865 1 109 1 2025-11-28 01:29:05.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52375 1 80 1 2025-11-28 01:30:05.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45008 1 80 1 2025-11-28 01:30:05.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47720 1 109 1 2025-11-28 01:30:05.556 00:00:00.000 UDP 28.104.0.1:47720 -> 198.28.0.2:53 1 64 1 2025-11-28 01:30:05.556 00:00:00.000 UDP 28.104.0.1:45008 -> 198.28.0.2:53 1 64 1 2025-11-28 01:26:03.160 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-28 01:26:04.860 00:05:08.627 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-28 01:31:05.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32993 1 109 1 2025-11-28 01:31:05.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46901 1 80 1 2025-11-28 01:31:05.810 00:00:00.000 UDP 28.104.0.1:32993 -> 198.28.0.2:53 1 64 1 2025-11-28 01:31:05.810 00:00:00.000 UDP 28.104.0.1:46901 -> 198.28.0.2:53 1 64 1 2025-11-28 01:29:13.476 00:02:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-28 01:29:13.476 00:02:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-28 01:27:04.869 00:05:08.608 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-28 01:27:04.910 00:05:08.763 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-28 01:32:06.123 00:00:00.000 UDP 28.104.0.1:39234 -> 198.28.0.2:53 1 64 1 2025-11-28 01:32:06.122 00:00:00.000 UDP 28.104.0.1:44777 -> 198.28.0.2:53 1 64 1 2025-11-28 01:32:06.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39234 1 80 1 2025-11-28 01:32:06.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44777 1 109 1 2025-11-28 01:28:04.861 00:05:08.823 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-28 01:33:06.372 00:00:00.000 UDP 28.104.0.1:46084 -> 198.28.0.2:53 1 64 1 2025-11-28 01:33:06.371 00:00:00.000 UDP 28.104.0.1:35261 -> 198.28.0.2:53 1 64 1 2025-11-28 01:33:06.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46084 1 109 1 2025-11-28 01:33:06.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35261 1 80 1 2025-11-28 01:32:13.477 00:01:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-28 01:32:13.477 00:01:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:33:56.530 00:00:00.026 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:34:06.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45066 1 109 1 2025-11-28 01:34:06.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37147 1 80 1 2025-11-28 01:34:06.664 00:00:00.000 UDP 28.104.0.1:45066 -> 198.28.0.2:53 1 64 1 2025-11-28 01:34:06.664 00:00:00.000 UDP 28.104.0.1:37147 -> 198.28.0.2:53 1 64 1 2025-11-28 01:35:07.540 00:00:00.000 UDP 28.104.0.1:34442 -> 198.28.0.2:53 1 64 1 2025-11-28 01:35:07.540 00:00:00.000 UDP 28.104.0.1:57106 -> 198.28.0.2:53 1 64 1 2025-11-28 01:35:07.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34442 1 80 1 2025-11-28 01:35:07.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57106 1 109 1 2025-11-28 01:34:13.478 00:01:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:31:23.165 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-28 01:36:07.796 00:00:00.000 UDP 28.104.0.1:46478 -> 198.28.0.2:53 1 64 1 2025-11-28 01:36:07.796 00:00:00.000 UDP 28.104.0.1:49021 -> 198.28.0.2:53 1 64 1 2025-11-28 01:36:07.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46478 1 80 1 2025-11-28 01:36:07.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49021 1 109 1 2025-11-28 01:36:13.478 00:00:00.456 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 123 1 2025-11-28 01:32:04.860 00:05:08.628 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-28 01:37:08.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49157 1 80 1 2025-11-28 01:37:08.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60047 1 109 1 2025-11-28 01:37:08.086 00:00:00.000 UDP 28.104.0.1:49157 -> 198.28.0.2:53 1 64 1 2025-11-28 01:37:08.086 00:00:00.000 UDP 28.104.0.1:60047 -> 198.28.0.2:53 1 64 1 2025-11-28 01:33:04.872 00:05:08.607 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-28 01:33:04.912 00:05:08.763 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-28 01:38:08.387 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53753 1 109 1 2025-11-28 01:38:08.387 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38753 1 80 1 2025-11-28 01:38:08.376 00:00:00.000 UDP 28.104.0.1:38753 -> 198.28.0.2:53 1 64 1 2025-11-28 01:38:08.376 00:00:00.000 UDP 28.104.0.1:53753 -> 198.28.0.2:53 1 64 1 2025-11-28 01:37:13.478 00:01:00.458 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:34:13.478 00:05:00.525 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-28 01:34:04.862 00:05:08.824 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-28 01:38:56.736 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:39:08.669 00:00:00.000 UDP 28.104.0.1:49069 -> 198.28.0.2:53 1 64 1 2025-11-28 01:39:08.669 00:00:00.000 UDP 28.104.0.1:58353 -> 198.28.0.2:53 1 64 1 2025-11-28 01:39:08.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58353 1 80 1 2025-11-28 01:39:08.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49069 1 109 1 2025-11-28 01:40:08.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53955 1 109 1 2025-11-28 01:40:08.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35096 1 80 1 2025-11-28 01:40:08.974 00:00:00.000 UDP 28.104.0.1:35096 -> 198.28.0.2:53 1 64 1 2025-11-28 01:40:08.974 00:00:00.000 UDP 28.104.0.1:53955 -> 198.28.0.2:53 1 64 1 2025-11-28 01:39:13.480 00:01:00.456 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:36:43.179 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2692 1 2025-11-28 01:41:09.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41618 1 80 1 2025-11-28 01:41:09.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35470 1 109 1 2025-11-28 01:41:09.275 00:00:00.000 UDP 28.104.0.1:41618 -> 198.28.0.2:53 1 64 1 2025-11-28 01:41:13.482 00:00:00.454 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 123 1 2025-11-28 01:41:09.275 00:00:00.000 UDP 28.104.0.1:35470 -> 198.28.0.2:53 1 64 1 2025-11-28 01:42:09.567 00:00:00.000 UDP 28.104.0.1:41371 -> 198.28.0.2:53 1 64 1 2025-11-28 01:42:09.567 00:00:00.000 UDP 28.104.0.1:46755 -> 198.28.0.2:53 1 64 1 2025-11-28 01:42:09.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41371 1 109 1 2025-11-28 01:42:09.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46755 1 80 1 2025-11-28 01:38:04.863 00:05:08.632 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-28 01:42:13.483 00:01:00.454 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:43:09.856 00:00:00.000 UDP 28.104.0.1:46092 -> 198.28.0.2:53 1 64 1 2025-11-28 01:43:09.856 00:00:00.000 UDP 28.104.0.1:36954 -> 198.28.0.2:53 1 64 1 2025-11-28 01:43:09.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36954 1 80 1 2025-11-28 01:43:09.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46092 1 109 1 2025-11-28 01:39:04.872 00:05:08.613 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-28 01:39:04.912 00:05:08.765 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-28 01:43:56.797 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:44:10.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45855 1 80 1 2025-11-28 01:44:10.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35912 1 109 1 2025-11-28 01:40:04.862 00:05:08.827 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-28 01:44:10.183 00:00:00.000 UDP 28.104.0.1:35912 -> 198.28.0.2:53 1 64 1 2025-11-28 01:44:10.183 00:00:00.000 UDP 28.104.0.1:45855 -> 198.28.0.2:53 1 64 1 2025-11-28 01:40:13.484 00:05:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-28 01:45:10.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39833 1 80 1 2025-11-28 01:45:10.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37821 1 109 1 2025-11-28 01:45:10.476 00:00:00.000 UDP 28.104.0.1:39833 -> 198.28.0.2:53 1 64 1 2025-11-28 01:44:13.486 00:01:00.452 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:45:10.476 00:00:00.000 UDP 28.104.0.1:37821 -> 198.28.0.2:53 1 64 1 2025-11-28 01:46:13.485 00:00:00.452 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 123 1 2025-11-28 01:46:10.769 00:00:00.000 UDP 28.104.0.1:45892 -> 198.28.0.2:53 1 64 1 2025-11-28 01:42:03.183 00:05:10.014 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2744 1 2025-11-28 01:46:10.769 00:00:00.000 UDP 28.104.0.1:45703 -> 198.28.0.2:53 1 64 1 2025-11-28 01:46:10.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45892 1 80 1 2025-11-28 01:46:10.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45703 1 109 1 2025-11-28 01:47:11.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43610 1 109 1 2025-11-28 01:47:11.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49967 1 80 1 2025-11-28 01:47:11.071 00:00:00.000 UDP 28.104.0.1:43610 -> 198.28.0.2:53 1 64 1 2025-11-28 01:47:11.071 00:00:00.000 UDP 28.104.0.1:49967 -> 198.28.0.2:53 1 64 1 2025-11-28 01:48:11.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41954 1 80 1 2025-11-28 01:44:04.867 00:05:08.637 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-28 01:48:11.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58915 1 109 1 2025-11-28 01:48:11.378 00:00:00.000 UDP 28.104.0.1:58915 -> 198.28.0.2:53 1 64 1 2025-11-28 01:48:11.378 00:00:00.000 UDP 28.104.0.1:41954 -> 198.28.0.2:53 1 64 1 2025-11-28 01:47:13.485 00:01:00.453 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:48:56.948 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:45:04.875 00:05:08.612 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-28 01:45:04.915 00:05:08.765 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-28 01:49:11.689 00:00:00.000 UDP 28.104.0.1:43122 -> 198.28.0.2:53 1 64 1 2025-11-28 01:49:11.689 00:00:00.000 UDP 28.104.0.1:57972 -> 198.28.0.2:53 1 64 1 2025-11-28 01:49:11.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43122 1 109 1 2025-11-28 01:49:11.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57972 1 80 1 2025-11-28 01:50:11.998 00:00:00.000 UDP 28.104.0.1:49885 -> 198.28.0.2:53 1 64 1 2025-11-28 01:49:13.492 00:01:00.447 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:50:11.999 00:00:00.000 UDP 28.104.0.1:35356 -> 198.28.0.2:53 1 64 1 2025-11-28 01:46:13.485 00:05:00.524 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-28 01:50:12.010 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35356 1 80 1 2025-11-28 01:50:12.010 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49885 1 109 1 2025-11-28 01:46:04.866 00:05:08.826 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-28 01:51:12.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41463 1 80 1 2025-11-28 01:51:12.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43323 1 109 1 2025-11-28 01:51:12.259 00:00:00.000 UDP 28.104.0.1:43323 -> 198.28.0.2:53 1 64 1 2025-11-28 01:51:12.259 00:00:00.000 UDP 28.104.0.1:41463 -> 198.28.0.2:53 1 64 1 2025-11-28 01:47:23.197 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2560 1 2025-11-28 01:52:12.609 00:00:00.000 UDP 28.104.0.1:40997 -> 198.28.0.2:53 1 64 1 2025-11-28 01:52:12.609 00:00:00.000 UDP 28.104.0.1:59817 -> 198.28.0.2:53 1 64 1 2025-11-28 01:52:12.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59817 1 109 1 2025-11-28 01:52:12.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40997 1 80 1 2025-11-28 01:51:13.488 00:02:00.452 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-28 01:53:12.903 00:00:00.000 UDP 28.104.0.1:51937 -> 198.28.0.2:53 1 64 1 2025-11-28 01:53:12.903 00:00:00.000 UDP 28.104.0.1:42545 -> 198.28.0.2:53 1 64 1 2025-11-28 01:53:12.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42545 1 109 1 2025-11-28 01:53:12.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51937 1 80 1 2025-11-28 01:53:56.987 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-28 01:54:13.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39302 1 109 1 2025-11-28 01:54:13.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41060 1 80 1 2025-11-28 01:54:13.207 00:00:00.000 UDP 28.104.0.1:41060 -> 198.28.0.2:53 1 64 1 2025-11-28 01:54:13.205 00:00:00.000 UDP 28.104.0.1:39302 -> 198.28.0.2:53 1 64 1 2025-11-28 01:50:04.866 00:05:08.632 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-28 01:55:13.472 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57621 1 109 1 2025-11-28 01:55:13.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60418 1 80 1 2025-11-28 01:55:13.463 00:00:00.000 UDP 28.104.0.1:57621 -> 198.28.0.2:53 1 64 1 2025-11-28 01:54:13.488 00:01:00.452 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-28 01:55:13.463 00:00:00.000 UDP 28.104.0.1:60418 -> 198.28.0.2:53 1 64 1 2025-11-28 01:51:04.917 00:05:08.765 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-28 01:51:04.876 00:05:08.613 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-28 01:56:13.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59258 1 109 1 2025-11-28 01:52:04.867 00:05:08.825 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-28 01:56:13.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55754 1 80 1 2025-11-28 01:56:13.716 00:00:00.000 UDP 28.104.0.1:59258 -> 198.28.0.2:53 1 64 1 2025-11-28 01:56:13.716 00:00:00.000 UDP 28.104.0.1:55754 -> 198.28.0.2:53 1 64 1 2025-11-28 01:52:13.487 00:05:00.524 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-28 01:52:43.199 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2700 1 2025-11-28 01:57:14.049 00:00:00.000 UDP 28.104.0.1:50210 -> 198.28.0.2:53 1 64 1 2025-11-28 01:57:14.049 00:00:00.000 UDP 28.104.0.1:49020 -> 198.28.0.2:53 1 64 1 2025-11-28 01:57:14.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50210 1 109 1 2025-11-28 01:57:14.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49020 1 80 1 2025-11-28 01:56:13.489 00:02:00.452 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-28 01:58:14.351 00:00:00.000 UDP 28.104.0.1:43292 -> 198.28.0.2:53 1 64 1 2025-11-28 01:58:14.351 00:00:00.000 UDP 28.104.0.1:57186 -> 198.28.0.2:53 1 64 1 2025-11-28 01:58:14.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43292 1 109 1 2025-11-28 01:58:14.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57186 1 80 1 Summary: total flows: 353, total bytes: 94965, total packets: 1400, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-11-28 00:56:04 - 2025-11-28 01:58:14 Total flows processed: 353, passed: 353, Blocks skipped: 0, Bytes read: 36776 Sys: 0.0032s User: 0.0043s Wall: 0.0041s flows/second: 86965.6 Runtime: 0.0041s