Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 08:55:05.418 00:05:08.713 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 08:54:14.120 00:06:00.483 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-29 08:59:22.368 00:00:00.000 UDP 28.104.0.1:34388 -> 198.28.0.2:53 1 64 1 2025-11-29 08:59:22.368 00:00:00.000 UDP 28.104.0.1:49606 -> 198.28.0.2:53 1 64 1 2025-11-29 08:59:22.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34388 1 109 1 2025-11-29 08:59:22.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49606 1 80 1 2025-11-29 08:59:34.381 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 08:55:14.120 00:06:00.501 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-29 08:56:05.428 00:05:08.693 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 08:56:05.468 00:05:08.801 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 09:00:22.622 00:00:00.000 UDP 28.104.0.1:46512 -> 198.28.0.2:53 1 64 1 2025-11-29 09:00:22.622 00:00:00.000 UDP 28.104.0.1:45514 -> 198.28.0.2:53 1 64 1 2025-11-29 09:00:22.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45514 1 80 1 2025-11-29 09:00:22.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46512 1 109 1 2025-11-29 09:01:22.916 00:00:00.000 UDP 28.104.0.1:33474 -> 198.28.0.2:53 1 64 1 2025-11-29 09:01:22.916 00:00:00.000 UDP 28.104.0.1:39350 -> 198.28.0.2:53 1 64 1 2025-11-29 08:57:05.419 00:05:08.860 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 09:01:22.928 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33474 1 80 1 2025-11-29 09:01:22.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39350 1 109 1 2025-11-29 08:57:45.635 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-29 09:02:23.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56371 1 109 1 2025-11-29 09:02:23.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35987 1 80 1 2025-11-29 09:02:23.235 00:00:00.000 UDP 28.104.0.1:35987 -> 198.28.0.2:53 1 64 1 2025-11-29 09:02:23.235 00:00:00.000 UDP 28.104.0.1:56371 -> 198.28.0.2:53 1 64 1 2025-11-29 09:03:23.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58141 1 80 1 2025-11-29 09:03:23.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34224 1 109 1 2025-11-29 09:03:23.537 00:00:00.000 UDP 28.104.0.1:34224 -> 198.28.0.2:53 1 64 1 2025-11-29 09:03:23.537 00:00:00.000 UDP 28.104.0.1:58141 -> 198.28.0.2:53 1 64 1 2025-11-29 09:04:23.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56248 1 109 1 2025-11-29 09:04:23.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34153 1 80 1 2025-11-29 09:04:23.832 00:00:00.000 UDP 28.104.0.1:34153 -> 198.28.0.2:53 1 64 1 2025-11-29 09:04:23.832 00:00:00.000 UDP 28.104.0.1:56248 -> 198.28.0.2:53 1 64 1 2025-11-29 09:04:34.539 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:01:05.421 00:05:08.711 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 09:05:24.125 00:00:00.000 UDP 28.104.0.1:41956 -> 198.28.0.2:53 1 64 1 2025-11-29 09:05:24.125 00:00:00.000 UDP 28.104.0.1:60204 -> 198.28.0.2:53 1 64 1 2025-11-29 09:05:24.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41956 1 80 1 2025-11-29 09:05:24.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60204 1 109 1 2025-11-29 09:01:14.121 00:06:00.488 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-29 09:02:05.433 00:05:08.689 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 09:02:05.473 00:05:08.798 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 09:06:24.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35028 1 109 1 2025-11-29 09:06:24.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39656 1 80 1 2025-11-29 09:06:24.427 00:00:00.000 UDP 28.104.0.1:39656 -> 198.28.0.2:53 1 64 1 2025-11-29 09:06:24.426 00:00:00.000 UDP 28.104.0.1:35028 -> 198.28.0.2:53 1 64 1 2025-11-29 09:03:05.424 00:05:08.857 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 09:02:14.122 00:06:00.503 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-29 09:03:05.637 00:05:10.092 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2708 1 2025-11-29 09:07:24.723 00:00:00.000 UDP 28.104.0.1:56805 -> 198.28.0.2:53 1 64 1 2025-11-29 09:07:24.722 00:00:00.000 UDP 28.104.0.1:58504 -> 198.28.0.2:53 1 64 1 2025-11-29 09:07:24.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58504 1 80 1 2025-11-29 09:07:24.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56805 1 109 1 2025-11-29 09:08:24.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53037 1 80 1 2025-11-29 09:08:24.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46582 1 109 1 2025-11-29 09:08:24.988 00:00:00.000 UDP 28.104.0.1:53037 -> 198.28.0.2:53 1 64 1 2025-11-29 09:08:24.988 00:00:00.000 UDP 28.104.0.1:46582 -> 198.28.0.2:53 1 64 1 2025-11-29 09:09:25.283 00:00:00.000 UDP 28.104.0.1:39101 -> 198.28.0.2:53 1 64 1 2025-11-29 09:09:25.283 00:00:00.000 UDP 28.104.0.1:32814 -> 198.28.0.2:53 1 64 1 2025-11-29 09:09:25.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39101 1 109 1 2025-11-29 09:09:25.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32814 1 80 1 2025-11-29 09:09:34.513 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:10:25.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40897 1 80 1 2025-11-29 09:10:25.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41953 1 109 1 2025-11-29 09:10:25.603 00:00:00.000 UDP 28.104.0.1:40897 -> 198.28.0.2:53 1 64 1 2025-11-29 09:10:25.604 00:00:00.000 UDP 28.104.0.1:41953 -> 198.28.0.2:53 1 64 1 2025-11-29 09:07:05.424 00:05:08.709 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 09:11:25.895 00:00:00.000 UDP 28.104.0.1:47149 -> 198.28.0.2:53 1 64 1 2025-11-29 09:11:25.896 00:00:00.000 UDP 28.104.0.1:52482 -> 198.28.0.2:53 1 64 1 2025-11-29 09:11:25.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47149 1 109 1 2025-11-29 09:11:25.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52482 1 80 1 2025-11-29 09:08:05.434 00:05:08.689 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 09:08:05.474 00:05:08.798 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 09:12:26.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42305 1 109 1 2025-11-29 09:12:26.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48448 1 80 1 2025-11-29 09:12:26.202 00:00:00.000 UDP 28.104.0.1:42305 -> 198.28.0.2:53 1 64 1 2025-11-29 09:12:26.202 00:00:00.000 UDP 28.104.0.1:48448 -> 198.28.0.2:53 1 64 1 2025-11-29 09:08:25.644 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2600 1 2025-11-29 09:08:14.123 00:06:00.488 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-29 09:09:05.425 00:05:08.858 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 09:13:26.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50149 1 109 1 2025-11-29 09:13:26.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49830 1 80 1 2025-11-29 09:13:26.525 00:00:00.000 UDP 28.104.0.1:49830 -> 198.28.0.2:53 1 64 1 2025-11-29 09:13:26.525 00:00:00.000 UDP 28.104.0.1:50149 -> 198.28.0.2:53 1 64 1 2025-11-29 09:09:14.122 00:06:00.504 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-29 09:14:26.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37741 1 80 1 2025-11-29 09:14:26.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48158 1 109 1 2025-11-29 09:14:26.823 00:00:00.000 UDP 28.104.0.1:37741 -> 198.28.0.2:53 1 64 1 2025-11-29 09:14:26.823 00:00:00.000 UDP 28.104.0.1:48158 -> 198.28.0.2:53 1 64 1 2025-11-29 09:14:34.715 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:15:27.107 00:00:00.000 UDP 28.104.0.1:50802 -> 198.28.0.2:53 1 64 1 2025-11-29 09:15:27.107 00:00:00.000 UDP 28.104.0.1:46171 -> 198.28.0.2:53 1 64 1 2025-11-29 09:15:27.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50802 1 80 1 2025-11-29 09:15:27.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46171 1 109 1 2025-11-29 09:16:27.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42529 1 109 1 2025-11-29 09:16:27.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34948 1 80 1 2025-11-29 09:16:27.400 00:00:00.000 UDP 28.104.0.1:42529 -> 198.28.0.2:53 1 64 1 2025-11-29 09:16:27.400 00:00:00.000 UDP 28.104.0.1:34948 -> 198.28.0.2:53 1 64 1 2025-11-29 09:13:05.425 00:05:08.709 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 09:17:27.705 00:00:00.000 UDP 28.104.0.1:47636 -> 198.28.0.2:53 1 64 1 2025-11-29 09:17:27.704 00:00:00.000 UDP 28.104.0.1:50018 -> 198.28.0.2:53 1 64 1 2025-11-29 09:17:27.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47636 1 80 1 2025-11-29 09:17:27.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50018 1 109 1 2025-11-29 09:13:45.650 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2940 1 2025-11-29 09:14:05.474 00:05:08.798 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 09:14:05.434 00:05:08.689 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 09:18:28.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56830 1 80 1 2025-11-29 09:18:28.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47531 1 109 1 2025-11-29 09:18:28.053 00:00:00.000 UDP 28.104.0.1:47531 -> 198.28.0.2:53 1 64 1 2025-11-29 09:18:28.052 00:00:00.000 UDP 28.104.0.1:56830 -> 198.28.0.2:53 1 64 1 2025-11-29 09:15:05.424 00:05:08.858 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 09:19:28.350 00:00:00.000 UDP 28.104.0.1:34631 -> 198.28.0.2:53 1 64 1 2025-11-29 09:19:28.350 00:00:00.000 UDP 28.104.0.1:43424 -> 198.28.0.2:53 1 64 1 2025-11-29 09:19:28.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43424 1 80 1 2025-11-29 09:19:28.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34631 1 109 1 2025-11-29 09:19:34.696 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:15:14.124 00:06:00.488 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-29 09:20:28.637 00:00:00.000 UDP 28.104.0.1:55681 -> 198.28.0.2:53 1 64 1 2025-11-29 09:20:28.637 00:00:00.000 UDP 28.104.0.1:57540 -> 198.28.0.2:53 1 64 1 2025-11-29 09:20:28.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55681 1 80 1 2025-11-29 09:20:28.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57540 1 109 1 2025-11-29 09:16:14.123 00:06:00.504 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-29 09:21:28.929 00:00:00.000 UDP 28.104.0.1:59473 -> 198.28.0.2:53 1 64 1 2025-11-29 09:21:28.929 00:00:00.000 UDP 28.104.0.1:50419 -> 198.28.0.2:53 1 64 1 2025-11-29 09:21:28.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59473 1 80 1 2025-11-29 09:21:28.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50419 1 109 1 2025-11-29 09:22:29.247 00:00:00.000 UDP 28.104.0.1:46674 -> 198.28.0.2:53 1 64 1 2025-11-29 09:22:29.247 00:00:00.000 UDP 28.104.0.1:47379 -> 198.28.0.2:53 1 64 1 2025-11-29 09:22:29.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47379 1 80 1 2025-11-29 09:22:29.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46674 1 109 1 2025-11-29 09:19:05.655 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-29 09:19:05.426 00:05:08.710 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 09:23:29.535 00:00:00.000 UDP 28.104.0.1:34068 -> 198.28.0.2:53 1 64 1 2025-11-29 09:23:29.535 00:00:00.000 UDP 28.104.0.1:37706 -> 198.28.0.2:53 1 64 1 2025-11-29 09:23:29.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34068 1 109 1 2025-11-29 09:23:29.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37706 1 80 1 2025-11-29 09:20:05.436 00:05:08.692 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 09:20:05.476 00:05:08.799 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 09:24:29.826 00:00:00.000 UDP 28.104.0.1:40693 -> 198.28.0.2:53 1 64 1 2025-11-29 09:24:29.826 00:00:00.000 UDP 28.104.0.1:40295 -> 198.28.0.2:53 1 64 1 2025-11-29 09:24:29.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40693 1 80 1 2025-11-29 09:24:29.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40295 1 109 1 2025-11-29 09:24:34.887 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:21:05.425 00:05:08.859 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 09:25:30.095 00:00:00.000 UDP 28.104.0.1:60760 -> 198.28.0.2:53 1 64 1 2025-11-29 09:25:30.094 00:00:00.000 UDP 28.104.0.1:54456 -> 198.28.0.2:53 1 64 1 2025-11-29 09:25:30.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54456 1 109 1 2025-11-29 09:25:30.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60760 1 80 1 2025-11-29 09:26:30.388 00:00:00.000 UDP 28.104.0.1:39838 -> 198.28.0.2:53 1 64 1 2025-11-29 09:26:30.387 00:00:00.000 UDP 28.104.0.1:42201 -> 198.28.0.2:53 1 64 1 2025-11-29 09:26:30.397 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42201 1 80 1 2025-11-29 09:26:30.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39838 1 109 1 2025-11-29 09:22:14.125 00:06:00.495 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-29 09:27:30.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33100 1 109 1 2025-11-29 09:27:30.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34164 1 80 1 2025-11-29 09:27:30.678 00:00:00.000 UDP 28.104.0.1:34164 -> 198.28.0.2:53 1 64 1 2025-11-29 09:27:30.678 00:00:00.000 UDP 28.104.0.1:33100 -> 198.28.0.2:53 1 64 1 2025-11-29 09:23:14.125 00:06:00.504 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-29 09:28:30.973 00:00:00.000 UDP 28.104.0.1:47704 -> 198.28.0.2:53 1 64 1 2025-11-29 09:28:30.973 00:00:00.000 UDP 28.104.0.1:37873 -> 198.28.0.2:53 1 64 1 2025-11-29 09:28:30.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47704 1 80 1 2025-11-29 09:28:30.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37873 1 109 1 2025-11-29 09:24:25.661 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-29 09:25:05.426 00:05:08.710 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 09:29:31.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58245 1 80 1 2025-11-29 09:29:31.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36287 1 109 1 2025-11-29 09:29:31.293 00:00:00.000 UDP 28.104.0.1:58245 -> 198.28.0.2:53 1 64 1 2025-11-29 09:29:31.293 00:00:00.000 UDP 28.104.0.1:36287 -> 198.28.0.2:53 1 64 1 2025-11-29 09:29:35.155 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:26:05.436 00:05:08.691 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 09:26:05.476 00:05:08.800 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 09:30:31.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58495 1 80 1 2025-11-29 09:30:31.606 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47812 1 109 1 2025-11-29 09:30:31.595 00:00:00.000 UDP 28.104.0.1:58495 -> 198.28.0.2:53 1 64 1 2025-11-29 09:30:31.596 00:00:00.000 UDP 28.104.0.1:47812 -> 198.28.0.2:53 1 64 1 2025-11-29 09:27:05.426 00:05:08.861 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 09:31:31.847 00:00:00.000 UDP 28.104.0.1:58531 -> 198.28.0.2:53 1 64 1 2025-11-29 09:31:31.847 00:00:00.000 UDP 28.104.0.1:38272 -> 198.28.0.2:53 1 64 1 2025-11-29 09:31:31.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38272 1 80 1 2025-11-29 09:31:31.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58531 1 109 1 2025-11-29 09:32:32.111 00:00:00.000 UDP 28.104.0.1:58301 -> 198.28.0.2:53 1 64 1 2025-11-29 09:32:32.111 00:00:00.000 UDP 28.104.0.1:43233 -> 198.28.0.2:53 1 64 1 2025-11-29 09:32:32.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43233 1 80 1 2025-11-29 09:32:32.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58301 1 109 1 2025-11-29 09:33:32.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57096 1 80 1 2025-11-29 09:33:32.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42932 1 109 1 2025-11-29 09:33:32.407 00:00:00.000 UDP 28.104.0.1:42932 -> 198.28.0.2:53 1 64 1 2025-11-29 09:33:32.407 00:00:00.000 UDP 28.104.0.1:57096 -> 198.28.0.2:53 1 64 1 2025-11-29 09:29:45.665 00:05:10.027 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2628 1 2025-11-29 09:29:14.127 00:06:00.497 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-29 09:34:33.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41968 1 80 1 2025-11-29 09:34:33.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40608 1 109 1 2025-11-29 09:34:33.753 00:00:00.000 UDP 28.104.0.1:41968 -> 198.28.0.2:53 1 64 1 2025-11-29 09:34:33.753 00:00:00.000 UDP 28.104.0.1:40608 -> 198.28.0.2:53 1 64 1 2025-11-29 09:34:34.937 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:31:05.428 00:05:08.710 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 09:30:14.127 00:06:00.506 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-29 09:35:34.053 00:00:00.000 UDP 28.104.0.1:58358 -> 198.28.0.2:53 1 64 1 2025-11-29 09:35:34.053 00:00:00.000 UDP 28.104.0.1:44453 -> 198.28.0.2:53 1 64 1 2025-11-29 09:35:34.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58358 1 80 1 2025-11-29 09:35:34.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44453 1 109 1 2025-11-29 09:32:05.439 00:05:08.691 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 09:32:05.479 00:05:08.800 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 09:36:34.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51529 1 80 1 2025-11-29 09:36:34.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49774 1 109 1 2025-11-29 09:36:34.361 00:00:00.000 UDP 28.104.0.1:51529 -> 198.28.0.2:53 1 64 1 2025-11-29 09:36:34.361 00:00:00.000 UDP 28.104.0.1:49774 -> 198.28.0.2:53 1 64 1 2025-11-29 09:33:05.427 00:05:08.860 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 09:37:34.674 00:00:00.000 UDP 28.104.0.1:41832 -> 198.28.0.2:53 1 64 1 2025-11-29 09:37:34.674 00:00:00.000 UDP 28.104.0.1:51461 -> 198.28.0.2:53 1 64 1 2025-11-29 09:37:34.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41832 1 109 1 2025-11-29 09:37:34.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51461 1 80 1 2025-11-29 09:38:34.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58091 1 80 1 2025-11-29 09:38:34.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47922 1 109 1 2025-11-29 09:38:34.938 00:00:00.000 UDP 28.104.0.1:58091 -> 198.28.0.2:53 1 64 1 2025-11-29 09:38:34.938 00:00:00.000 UDP 28.104.0.1:47922 -> 198.28.0.2:53 1 64 1 2025-11-29 09:35:05.685 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2664 1 2025-11-29 09:39:35.319 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:39:35.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50557 1 109 1 2025-11-29 09:39:35.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55359 1 80 1 2025-11-29 09:39:35.236 00:00:00.000 UDP 28.104.0.1:55359 -> 198.28.0.2:53 1 64 1 2025-11-29 09:39:35.236 00:00:00.000 UDP 28.104.0.1:50557 -> 198.28.0.2:53 1 64 1 2025-11-29 09:40:35.526 00:00:00.000 UDP 28.104.0.1:50256 -> 198.28.0.2:53 1 64 1 2025-11-29 09:40:35.526 00:00:00.000 UDP 28.104.0.1:55528 -> 198.28.0.2:53 1 64 1 2025-11-29 09:40:35.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55528 1 80 1 2025-11-29 09:40:35.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50256 1 109 1 2025-11-29 09:36:14.128 00:06:00.498 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-29 09:37:05.429 00:05:08.711 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 09:41:35.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59942 1 109 1 2025-11-29 09:41:35.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33666 1 80 1 2025-11-29 09:41:35.818 00:00:00.000 UDP 28.104.0.1:33666 -> 198.28.0.2:53 1 64 1 2025-11-29 09:41:35.819 00:00:00.000 UDP 28.104.0.1:59942 -> 198.28.0.2:53 1 64 1 2025-11-29 09:37:14.129 00:06:00.509 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-29 09:38:05.439 00:05:08.692 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 09:38:05.479 00:05:08.801 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 09:42:36.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39386 1 109 1 2025-11-29 09:42:36.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58307 1 80 1 2025-11-29 09:42:36.106 00:00:00.000 UDP 28.104.0.1:39386 -> 198.28.0.2:53 1 64 1 2025-11-29 09:42:36.107 00:00:00.000 UDP 28.104.0.1:58307 -> 198.28.0.2:53 1 64 1 2025-11-29 09:39:05.429 00:05:08.861 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 09:43:36.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33652 1 80 1 2025-11-29 09:43:36.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42237 1 109 1 2025-11-29 09:43:36.710 00:00:00.000 UDP 28.104.0.1:42237 -> 198.28.0.2:53 1 64 1 2025-11-29 09:43:36.710 00:00:00.000 UDP 28.104.0.1:33652 -> 198.28.0.2:53 1 64 1 2025-11-29 09:44:37.006 00:00:00.000 UDP 28.104.0.1:56445 -> 198.28.0.2:53 1 64 1 2025-11-29 09:44:37.006 00:00:00.000 UDP 28.104.0.1:58860 -> 198.28.0.2:53 1 64 1 2025-11-29 09:40:25.698 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2612 1 2025-11-29 09:44:37.019 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58860 1 80 1 2025-11-29 09:44:37.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56445 1 109 1 2025-11-29 09:44:35.353 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:45:37.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60571 1 80 1 2025-11-29 09:45:37.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41941 1 109 1 2025-11-29 09:45:37.257 00:00:00.000 UDP 28.104.0.1:41941 -> 198.28.0.2:53 1 64 1 2025-11-29 09:45:37.257 00:00:00.000 UDP 28.104.0.1:60571 -> 198.28.0.2:53 1 64 1 2025-11-29 09:46:37.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33948 1 109 1 2025-11-29 09:46:37.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41120 1 80 1 2025-11-29 09:46:37.551 00:00:00.000 UDP 28.104.0.1:33948 -> 198.28.0.2:53 1 64 1 2025-11-29 09:46:37.551 00:00:00.000 UDP 28.104.0.1:41120 -> 198.28.0.2:53 1 64 1 2025-11-29 09:43:05.430 00:05:08.710 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 09:47:37.841 00:00:00.000 UDP 28.104.0.1:54193 -> 198.28.0.2:53 1 64 1 2025-11-29 09:47:37.840 00:00:00.000 UDP 28.104.0.1:38153 -> 198.28.0.2:53 1 64 1 2025-11-29 09:47:37.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54193 1 109 1 2025-11-29 09:47:37.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38153 1 80 1 2025-11-29 09:44:05.440 00:05:08.691 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 09:44:05.480 00:05:08.801 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 09:43:14.130 00:06:00.500 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-29 09:48:38.134 00:00:00.000 UDP 28.104.0.1:38477 -> 198.28.0.2:53 1 64 1 2025-11-29 09:48:38.134 00:00:00.000 UDP 28.104.0.1:35520 -> 198.28.0.2:53 1 64 1 2025-11-29 09:48:38.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38477 1 109 1 2025-11-29 09:48:38.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35520 1 80 1 2025-11-29 09:45:05.429 00:05:08.862 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 09:44:14.131 00:06:00.512 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-29 09:49:35.344 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:49:38.470 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48417 1 109 1 2025-11-29 09:49:38.470 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46719 1 80 1 2025-11-29 09:49:38.459 00:00:00.000 UDP 28.104.0.1:46719 -> 198.28.0.2:53 1 64 1 2025-11-29 09:49:38.459 00:00:00.000 UDP 28.104.0.1:48417 -> 198.28.0.2:53 1 64 1 2025-11-29 09:45:45.702 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2624 1 2025-11-29 09:50:38.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43934 1 80 1 2025-11-29 09:50:38.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46499 1 109 1 2025-11-29 09:50:38.749 00:00:00.000 UDP 28.104.0.1:46499 -> 198.28.0.2:53 1 64 1 2025-11-29 09:50:38.749 00:00:00.000 UDP 28.104.0.1:43934 -> 198.28.0.2:53 1 64 1 2025-11-29 09:51:39.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60136 1 109 1 2025-11-29 09:51:39.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47280 1 80 1 2025-11-29 09:51:39.050 00:00:00.000 UDP 28.104.0.1:47280 -> 198.28.0.2:53 1 64 1 2025-11-29 09:51:39.051 00:00:00.000 UDP 28.104.0.1:60136 -> 198.28.0.2:53 1 64 1 2025-11-29 09:52:39.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55981 1 80 1 2025-11-29 09:52:39.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48437 1 109 1 2025-11-29 09:52:39.303 00:00:00.000 UDP 28.104.0.1:55981 -> 198.28.0.2:53 1 64 1 2025-11-29 09:52:39.303 00:00:00.000 UDP 28.104.0.1:48437 -> 198.28.0.2:53 1 64 1 2025-11-29 09:49:05.430 00:05:08.711 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 09:53:39.565 00:00:00.000 UDP 28.104.0.1:42023 -> 198.28.0.2:53 1 64 1 2025-11-29 09:53:39.565 00:00:00.000 UDP 28.104.0.1:41685 -> 198.28.0.2:53 1 64 1 2025-11-29 09:53:39.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41685 1 80 1 2025-11-29 09:53:39.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42023 1 109 1 2025-11-29 09:50:05.439 00:05:08.693 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 09:50:05.480 00:05:08.802 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 09:54:35.477 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 09:54:40.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35660 1 109 1 2025-11-29 09:54:40.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55969 1 80 1 2025-11-29 09:54:40.502 00:00:00.000 UDP 28.104.0.1:35660 -> 198.28.0.2:53 1 64 1 2025-11-29 09:54:40.502 00:00:00.000 UDP 28.104.0.1:55969 -> 198.28.0.2:53 1 64 1 2025-11-29 09:50:14.131 00:06:00.502 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-29 09:51:05.710 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-29 09:51:05.432 00:05:08.861 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 09:55:40.772 00:00:00.000 UDP 28.104.0.1:38213 -> 198.28.0.2:53 1 64 1 2025-11-29 09:55:40.771 00:00:00.000 UDP 28.104.0.1:56875 -> 198.28.0.2:53 1 64 1 2025-11-29 09:55:40.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56875 1 109 1 2025-11-29 09:55:40.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38213 1 80 1 2025-11-29 09:51:14.130 00:06:00.512 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-29 09:56:41.075 00:00:00.000 UDP 28.104.0.1:43103 -> 198.28.0.2:53 1 64 1 2025-11-29 09:56:41.075 00:00:00.000 UDP 28.104.0.1:38219 -> 198.28.0.2:53 1 64 1 2025-11-29 09:56:41.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38219 1 80 1 2025-11-29 09:56:41.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43103 1 109 1 2025-11-29 09:57:41.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42901 1 80 1 2025-11-29 09:57:41.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43774 1 109 1 2025-11-29 09:57:41.371 00:00:00.000 UDP 28.104.0.1:43774 -> 198.28.0.2:53 1 64 1 2025-11-29 09:57:41.371 00:00:00.000 UDP 28.104.0.1:42901 -> 198.28.0.2:53 1 64 1 2025-11-29 09:58:41.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38857 1 80 1 2025-11-29 09:58:41.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44122 1 109 1 2025-11-29 09:58:41.672 00:00:00.000 UDP 28.104.0.1:44122 -> 198.28.0.2:53 1 64 1 2025-11-29 09:58:41.673 00:00:00.000 UDP 28.104.0.1:38857 -> 198.28.0.2:53 1 64 1 Summary: total flows: 321, total bytes: 95318, total packets: 1406, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-11-29 08:54:14 - 2025-11-29 09:58:41 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0043s User: 0.0034s Wall: 0.0034s flows/second: 93667.1 Runtime: 0.0034s