Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 02:55:05.769 00:05:08.663 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 02:59:31.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55913 1 80 1 2025-11-30 02:59:31.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38818 1 109 1 2025-11-30 02:59:31.692 00:00:00.000 UDP 28.104.0.1:38818 -> 198.28.0.2:53 1 64 1 2025-11-30 02:59:31.692 00:00:00.000 UDP 28.104.0.1:55913 -> 198.28.0.2:53 1 64 1 2025-11-30 02:59:56.241 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:56:05.779 00:05:08.643 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 02:56:05.819 00:05:08.763 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 03:00:32.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42060 1 109 1 2025-11-30 03:00:32.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60857 1 80 1 2025-11-30 03:00:32.363 00:00:00.000 UDP 28.104.0.1:60857 -> 198.28.0.2:53 1 64 1 2025-11-30 03:00:32.363 00:00:00.000 UDP 28.104.0.1:42060 -> 198.28.0.2:53 1 64 1 2025-11-30 02:57:05.769 00:05:08.823 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:01:32.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36400 1 80 1 2025-11-30 03:01:32.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34039 1 109 1 2025-11-30 03:01:32.660 00:00:00.000 UDP 28.104.0.1:34039 -> 198.28.0.2:53 1 64 1 2025-11-30 03:01:32.660 00:00:00.000 UDP 28.104.0.1:36400 -> 198.28.0.2:53 1 64 1 2025-11-30 03:02:32.932 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50002 1 109 1 2025-11-30 03:02:32.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40353 1 80 1 2025-11-30 03:02:32.922 00:00:00.000 UDP 28.104.0.1:50002 -> 198.28.0.2:53 1 64 1 2025-11-30 03:02:32.922 00:00:00.000 UDP 28.104.0.1:40353 -> 198.28.0.2:53 1 64 1 2025-11-30 03:03:33.249 00:00:00.000 UDP 28.104.0.1:35920 -> 198.28.0.2:53 1 64 1 2025-11-30 03:03:33.249 00:00:00.000 UDP 28.104.0.1:38445 -> 198.28.0.2:53 1 64 1 2025-11-30 03:03:33.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38445 1 109 1 2025-11-30 03:03:33.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35920 1 80 1 2025-11-30 02:59:27.276 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2296 1 2025-11-30 02:59:14.423 00:06:00.560 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 03:04:33.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38108 1 80 1 2025-11-30 03:04:33.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50088 1 109 1 2025-11-30 03:04:33.542 00:00:00.000 UDP 28.104.0.1:38108 -> 198.28.0.2:53 1 64 1 2025-11-30 03:04:33.542 00:00:00.000 UDP 28.104.0.1:50088 -> 198.28.0.2:53 1 64 1 2025-11-30 03:04:56.298 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:00:14.422 00:06:00.520 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 03:01:05.770 00:05:08.664 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 03:05:33.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55917 1 80 1 2025-11-30 03:05:33.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37847 1 109 1 2025-11-30 03:05:33.836 00:00:00.000 UDP 28.104.0.1:55917 -> 198.28.0.2:53 1 64 1 2025-11-30 03:05:33.836 00:00:00.000 UDP 28.104.0.1:37847 -> 198.28.0.2:53 1 64 1 2025-11-30 03:02:05.779 00:05:08.645 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 03:02:05.819 00:05:08.763 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 03:06:34.130 00:00:00.000 UDP 28.104.0.1:52304 -> 198.28.0.2:53 1 64 1 2025-11-30 03:06:34.131 00:00:00.000 UDP 28.104.0.1:42713 -> 198.28.0.2:53 1 64 1 2025-11-30 03:06:34.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42713 1 80 1 2025-11-30 03:06:34.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52304 1 109 1 2025-11-30 03:03:05.770 00:05:08.823 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:07:34.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45429 1 80 1 2025-11-30 03:07:34.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39263 1 109 1 2025-11-30 03:07:34.717 00:00:00.000 UDP 28.104.0.1:39263 -> 198.28.0.2:53 1 64 1 2025-11-30 03:07:34.718 00:00:00.000 UDP 28.104.0.1:45429 -> 198.28.0.2:53 1 64 1 2025-11-30 03:08:35.032 00:00:00.000 UDP 28.104.0.1:35112 -> 198.28.0.2:53 1 64 1 2025-11-30 03:08:35.034 00:00:00.000 UDP 28.104.0.1:52816 -> 198.28.0.2:53 1 64 1 2025-11-30 03:08:35.043 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35112 1 80 1 2025-11-30 03:08:35.044 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52816 1 109 1 2025-11-30 03:04:47.284 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2532 1 2025-11-30 03:09:35.324 00:00:00.000 UDP 28.104.0.1:35383 -> 198.28.0.2:53 1 64 1 2025-11-30 03:09:35.324 00:00:00.000 UDP 28.104.0.1:41698 -> 198.28.0.2:53 1 64 1 2025-11-30 03:09:35.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41698 1 109 1 2025-11-30 03:09:35.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35383 1 80 1 2025-11-30 03:09:56.484 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:10:35.620 00:00:00.000 UDP 28.104.0.1:34000 -> 198.28.0.2:53 1 64 1 2025-11-30 03:10:35.620 00:00:00.000 UDP 28.104.0.1:32898 -> 198.28.0.2:53 1 64 1 2025-11-30 03:10:35.630 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34000 1 109 1 2025-11-30 03:10:35.630 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32898 1 80 1 2025-11-30 03:06:14.425 00:06:00.563 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 03:07:05.772 00:05:08.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 03:11:35.913 00:00:00.000 UDP 28.104.0.1:60090 -> 198.28.0.2:53 1 64 1 2025-11-30 03:11:35.913 00:00:00.000 UDP 28.104.0.1:49681 -> 198.28.0.2:53 1 64 1 2025-11-30 03:11:35.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60090 1 109 1 2025-11-30 03:11:35.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49681 1 80 1 2025-11-30 03:07:14.425 00:06:00.517 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 03:08:05.782 00:05:08.653 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 03:08:05.822 00:05:08.762 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 03:12:36.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35775 1 80 1 2025-11-30 03:12:36.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52979 1 109 1 2025-11-30 03:12:36.247 00:00:00.000 UDP 28.104.0.1:35775 -> 198.28.0.2:53 1 64 1 2025-11-30 03:12:36.247 00:00:00.000 UDP 28.104.0.1:52979 -> 198.28.0.2:53 1 64 1 2025-11-30 03:09:05.774 00:05:08.822 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:13:36.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50070 1 80 1 2025-11-30 03:13:36.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51347 1 109 1 2025-11-30 03:13:36.553 00:00:00.000 UDP 28.104.0.1:51347 -> 198.28.0.2:53 1 64 1 2025-11-30 03:13:36.553 00:00:00.000 UDP 28.104.0.1:50070 -> 198.28.0.2:53 1 64 1 2025-11-30 03:10:07.295 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-11-30 03:14:36.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43742 1 80 1 2025-11-30 03:14:36.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45834 1 109 1 2025-11-30 03:14:36.860 00:00:00.000 UDP 28.104.0.1:43742 -> 198.28.0.2:53 1 64 1 2025-11-30 03:14:36.860 00:00:00.000 UDP 28.104.0.1:45834 -> 198.28.0.2:53 1 64 1 2025-11-30 03:14:56.518 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:15:37.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38759 1 80 1 2025-11-30 03:15:37.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38984 1 109 1 2025-11-30 03:15:37.185 00:00:00.000 UDP 28.104.0.1:38984 -> 198.28.0.2:53 1 64 1 2025-11-30 03:15:37.185 00:00:00.000 UDP 28.104.0.1:38759 -> 198.28.0.2:53 1 64 1 2025-11-30 03:16:37.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38967 1 80 1 2025-11-30 03:16:37.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44723 1 109 1 2025-11-30 03:16:37.480 00:00:00.000 UDP 28.104.0.1:44723 -> 198.28.0.2:53 1 64 1 2025-11-30 03:16:37.480 00:00:00.000 UDP 28.104.0.1:38967 -> 198.28.0.2:53 1 64 1 2025-11-30 03:13:05.774 00:05:08.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 03:17:37.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33074 1 80 1 2025-11-30 03:17:37.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55150 1 109 1 2025-11-30 03:17:37.771 00:00:00.000 UDP 28.104.0.1:33074 -> 198.28.0.2:53 1 64 1 2025-11-30 03:17:37.771 00:00:00.000 UDP 28.104.0.1:55150 -> 198.28.0.2:53 1 64 1 2025-11-30 03:14:05.783 00:05:08.653 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 03:14:05.823 00:05:08.763 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 03:13:14.435 00:06:00.555 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 03:18:38.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47760 1 109 1 2025-11-30 03:18:38.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36055 1 80 1 2025-11-30 03:18:38.119 00:00:00.000 UDP 28.104.0.1:47760 -> 198.28.0.2:53 1 64 1 2025-11-30 03:18:38.119 00:00:00.000 UDP 28.104.0.1:36055 -> 198.28.0.2:53 1 64 1 2025-11-30 03:15:05.773 00:05:08.823 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:14:14.436 00:06:00.509 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 03:19:38.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58853 1 80 1 2025-11-30 03:19:38.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41413 1 109 1 2025-11-30 03:19:38.373 00:00:00.000 UDP 28.104.0.1:41413 -> 198.28.0.2:53 1 64 1 2025-11-30 03:19:38.373 00:00:00.000 UDP 28.104.0.1:58853 -> 198.28.0.2:53 1 64 1 2025-11-30 03:15:27.300 00:05:10.014 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2760 1 2025-11-30 03:19:56.489 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:20:40.637 00:00:00.000 UDP 28.104.0.1:45532 -> 198.28.0.2:53 1 64 1 2025-11-30 03:20:40.637 00:00:00.000 UDP 28.104.0.1:37282 -> 198.28.0.2:53 1 64 1 2025-11-30 03:20:40.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45532 1 109 1 2025-11-30 03:20:40.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37282 1 80 1 2025-11-30 03:21:40.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44416 1 80 1 2025-11-30 03:21:40.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58798 1 109 1 2025-11-30 03:21:40.923 00:00:00.000 UDP 28.104.0.1:58798 -> 198.28.0.2:53 1 64 1 2025-11-30 03:21:40.924 00:00:00.000 UDP 28.104.0.1:44416 -> 198.28.0.2:53 1 64 1 2025-11-30 03:22:41.244 00:00:00.000 UDP 28.104.0.1:50599 -> 198.28.0.2:53 1 64 1 2025-11-30 03:22:41.244 00:00:00.000 UDP 28.104.0.1:56551 -> 198.28.0.2:53 1 64 1 2025-11-30 03:22:41.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56551 1 109 1 2025-11-30 03:22:41.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50599 1 80 1 2025-11-30 03:19:05.774 00:05:08.677 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 03:23:41.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36539 1 109 1 2025-11-30 03:23:41.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34169 1 80 1 2025-11-30 03:23:41.495 00:00:00.000 UDP 28.104.0.1:36539 -> 198.28.0.2:53 1 64 1 2025-11-30 03:23:41.495 00:00:00.000 UDP 28.104.0.1:34169 -> 198.28.0.2:53 1 64 1 2025-11-30 03:20:05.785 00:05:08.657 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 03:20:05.825 00:05:08.764 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 03:24:41.782 00:00:00.000 UDP 28.104.0.1:46593 -> 198.28.0.2:53 1 64 1 2025-11-30 03:24:41.782 00:00:00.000 UDP 28.104.0.1:33867 -> 198.28.0.2:53 1 64 1 2025-11-30 03:24:41.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33867 1 109 1 2025-11-30 03:24:41.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46593 1 80 1 2025-11-30 03:20:47.315 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2804 1 2025-11-30 03:24:56.679 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:20:14.437 00:06:00.554 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 03:21:05.774 00:05:08.824 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:25:42.075 00:00:00.000 UDP 28.104.0.1:42577 -> 198.28.0.2:53 1 64 1 2025-11-30 03:25:42.075 00:00:00.000 UDP 28.104.0.1:40247 -> 198.28.0.2:53 1 64 1 2025-11-30 03:25:42.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42577 1 109 1 2025-11-30 03:25:42.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40247 1 80 1 2025-11-30 03:21:14.438 00:06:00.509 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 03:26:42.403 00:00:00.000 UDP 28.104.0.1:59705 -> 198.28.0.2:53 1 64 1 2025-11-30 03:26:42.403 00:00:00.000 UDP 28.104.0.1:47278 -> 198.28.0.2:53 1 64 1 2025-11-30 03:26:42.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47278 1 109 1 2025-11-30 03:26:42.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59705 1 80 1 2025-11-30 03:27:42.688 00:00:00.000 UDP 28.104.0.1:47946 -> 198.28.0.2:53 1 64 1 2025-11-30 03:27:42.688 00:00:00.000 UDP 28.104.0.1:50525 -> 198.28.0.2:53 1 64 1 2025-11-30 03:27:42.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47946 1 109 1 2025-11-30 03:27:42.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50525 1 80 1 2025-11-30 03:28:42.981 00:00:00.000 UDP 28.104.0.1:52645 -> 198.28.0.2:53 1 64 1 2025-11-30 03:28:42.980 00:00:00.000 UDP 28.104.0.1:40863 -> 198.28.0.2:53 1 64 1 2025-11-30 03:28:42.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40863 1 109 1 2025-11-30 03:28:42.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52645 1 80 1 2025-11-30 03:25:05.777 00:05:08.675 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 03:29:43.275 00:00:00.000 UDP 28.104.0.1:52916 -> 198.28.0.2:53 1 64 1 2025-11-30 03:29:43.274 00:00:00.000 UDP 28.104.0.1:48732 -> 198.28.0.2:53 1 64 1 2025-11-30 03:29:43.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52916 1 109 1 2025-11-30 03:29:43.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48732 1 80 1 2025-11-30 03:29:56.850 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:26:05.786 00:05:08.660 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 03:26:05.826 00:05:08.763 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 03:26:07.325 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-30 03:30:43.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33493 1 80 1 2025-11-30 03:30:43.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52416 1 109 1 2025-11-30 03:30:43.572 00:00:00.000 UDP 28.104.0.1:33493 -> 198.28.0.2:53 1 64 1 2025-11-30 03:30:43.573 00:00:00.000 UDP 28.104.0.1:52416 -> 198.28.0.2:53 1 64 1 2025-11-30 03:27:05.776 00:05:08.822 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:31:43.825 00:00:00.000 UDP 28.104.0.1:57303 -> 198.28.0.2:53 1 64 1 2025-11-30 03:31:43.826 00:00:00.000 UDP 28.104.0.1:37782 -> 198.28.0.2:53 1 64 1 2025-11-30 03:31:43.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57303 1 109 1 2025-11-30 03:31:43.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37782 1 80 1 2025-11-30 03:27:14.442 00:06:00.551 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 03:32:44.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38107 1 109 1 2025-11-30 03:32:44.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38407 1 80 1 2025-11-30 03:32:44.084 00:00:00.000 UDP 28.104.0.1:38407 -> 198.28.0.2:53 1 64 1 2025-11-30 03:32:44.084 00:00:00.000 UDP 28.104.0.1:38107 -> 198.28.0.2:53 1 64 1 2025-11-30 03:28:14.441 00:06:00.506 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 03:33:44.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38693 1 109 1 2025-11-30 03:33:44.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40778 1 80 1 2025-11-30 03:33:44.380 00:00:00.000 UDP 28.104.0.1:38693 -> 198.28.0.2:53 1 64 1 2025-11-30 03:33:44.380 00:00:00.000 UDP 28.104.0.1:40778 -> 198.28.0.2:53 1 64 1 2025-11-30 03:34:44.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56577 1 80 1 2025-11-30 03:34:44.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55023 1 109 1 2025-11-30 03:34:44.634 00:00:00.000 UDP 28.104.0.1:55023 -> 198.28.0.2:53 1 64 1 2025-11-30 03:34:44.634 00:00:00.000 UDP 28.104.0.1:56577 -> 198.28.0.2:53 1 64 1 2025-11-30 03:34:56.869 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:31:05.781 00:05:08.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 03:31:27.335 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2452 1 2025-11-30 03:35:44.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49602 1 109 1 2025-11-30 03:35:44.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43576 1 80 1 2025-11-30 03:35:44.936 00:00:00.000 UDP 28.104.0.1:43576 -> 198.28.0.2:53 1 64 1 2025-11-30 03:35:44.936 00:00:00.000 UDP 28.104.0.1:49602 -> 198.28.0.2:53 1 64 1 2025-11-30 03:32:05.790 00:05:08.652 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 03:32:05.830 00:05:08.759 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 03:36:45.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52217 1 109 1 2025-11-30 03:36:45.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56378 1 80 1 2025-11-30 03:36:45.235 00:00:00.000 UDP 28.104.0.1:56378 -> 198.28.0.2:53 1 64 1 2025-11-30 03:36:45.235 00:00:00.000 UDP 28.104.0.1:52217 -> 198.28.0.2:53 1 64 1 2025-11-30 03:33:05.785 00:05:08.819 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:37:45.485 00:00:00.000 UDP 28.104.0.1:46961 -> 198.28.0.2:53 1 64 1 2025-11-30 03:37:45.485 00:00:00.000 UDP 28.104.0.1:52070 -> 198.28.0.2:53 1 64 1 2025-11-30 03:37:45.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52070 1 109 1 2025-11-30 03:37:45.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46961 1 80 1 2025-11-30 03:38:45.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36624 1 80 1 2025-11-30 03:38:45.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47866 1 109 1 2025-11-30 03:38:45.783 00:00:00.000 UDP 28.104.0.1:36624 -> 198.28.0.2:53 1 64 1 2025-11-30 03:38:45.783 00:00:00.000 UDP 28.104.0.1:47866 -> 198.28.0.2:53 1 64 1 2025-11-30 03:34:14.442 00:06:00.551 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 03:39:46.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34090 1 109 1 2025-11-30 03:39:46.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36665 1 80 1 2025-11-30 03:39:46.601 00:00:00.000 UDP 28.104.0.1:36665 -> 198.28.0.2:53 1 64 1 2025-11-30 03:39:46.600 00:00:00.000 UDP 28.104.0.1:34090 -> 198.28.0.2:53 1 64 1 2025-11-30 03:39:57.069 00:00:00.031 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:35:14.443 00:06:00.506 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 03:40:46.850 00:00:00.000 UDP 28.104.0.1:40932 -> 198.28.0.2:53 1 64 1 2025-11-30 03:40:46.851 00:00:00.000 UDP 28.104.0.1:38909 -> 198.28.0.2:53 1 64 1 2025-11-30 03:40:46.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38909 1 109 1 2025-11-30 03:40:46.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40932 1 80 1 2025-11-30 03:36:47.342 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-30 03:37:05.785 00:05:08.668 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 03:41:47.172 00:00:00.000 UDP 28.104.0.1:37269 -> 198.28.0.2:53 1 64 1 2025-11-30 03:41:47.172 00:00:00.000 UDP 28.104.0.1:33743 -> 198.28.0.2:53 1 64 1 2025-11-30 03:41:47.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37269 1 80 1 2025-11-30 03:41:47.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33743 1 109 1 2025-11-30 03:38:05.796 00:05:08.647 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 03:38:05.836 00:05:08.758 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 03:42:47.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53041 1 109 1 2025-11-30 03:42:47.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37360 1 80 1 2025-11-30 03:42:47.475 00:00:00.000 UDP 28.104.0.1:53041 -> 198.28.0.2:53 1 64 1 2025-11-30 03:42:47.475 00:00:00.000 UDP 28.104.0.1:37360 -> 198.28.0.2:53 1 64 1 2025-11-30 03:39:05.785 00:05:08.820 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:43:47.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48789 1 109 1 2025-11-30 03:43:47.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36523 1 80 1 2025-11-30 03:43:47.761 00:00:00.000 UDP 28.104.0.1:48789 -> 198.28.0.2:53 1 64 1 2025-11-30 03:43:47.761 00:00:00.000 UDP 28.104.0.1:36523 -> 198.28.0.2:53 1 64 1 2025-11-30 03:44:48.063 00:00:00.000 UDP 28.104.0.1:37686 -> 198.28.0.2:53 1 64 1 2025-11-30 03:44:48.064 00:00:00.000 UDP 28.104.0.1:36728 -> 198.28.0.2:53 1 64 1 2025-11-30 03:44:48.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37686 1 109 1 2025-11-30 03:44:48.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36728 1 80 1 2025-11-30 03:44:57.003 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:45:48.356 00:00:00.000 UDP 28.104.0.1:59519 -> 198.28.0.2:53 1 64 1 2025-11-30 03:45:48.356 00:00:00.000 UDP 28.104.0.1:38472 -> 198.28.0.2:53 1 64 1 2025-11-30 03:45:48.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38472 1 109 1 2025-11-30 03:45:48.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59519 1 80 1 2025-11-30 03:41:14.443 00:06:00.557 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 03:42:07.350 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2840 1 2025-11-30 03:46:48.658 00:00:00.000 UDP 28.104.0.1:60584 -> 198.28.0.2:53 1 64 1 2025-11-30 03:46:48.658 00:00:00.000 UDP 28.104.0.1:60209 -> 198.28.0.2:53 1 64 1 2025-11-30 03:46:48.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60584 1 109 1 2025-11-30 03:46:48.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60209 1 80 1 2025-11-30 03:43:05.785 00:05:08.669 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 03:42:14.443 00:06:00.506 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 03:47:48.955 00:00:00.000 UDP 28.104.0.1:39020 -> 198.28.0.2:53 1 64 1 2025-11-30 03:47:48.955 00:00:00.000 UDP 28.104.0.1:44350 -> 198.28.0.2:53 1 64 1 2025-11-30 03:47:48.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44350 1 109 1 2025-11-30 03:47:48.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39020 1 80 1 2025-11-30 03:44:05.797 00:05:08.647 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 03:44:05.837 00:05:08.758 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 03:48:49.234 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34288 1 80 1 2025-11-30 03:48:49.232 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48920 1 109 1 2025-11-30 03:48:49.222 00:00:00.000 UDP 28.104.0.1:48920 -> 198.28.0.2:53 1 64 1 2025-11-30 03:48:49.222 00:00:00.000 UDP 28.104.0.1:34288 -> 198.28.0.2:53 1 64 1 2025-11-30 03:45:05.787 00:05:08.818 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:49:49.517 00:00:00.000 UDP 28.104.0.1:58593 -> 198.28.0.2:53 1 64 1 2025-11-30 03:49:49.517 00:00:00.000 UDP 28.104.0.1:56547 -> 198.28.0.2:53 1 64 1 2025-11-30 03:49:49.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58593 1 109 1 2025-11-30 03:49:49.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56547 1 80 1 2025-11-30 03:49:57.118 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:50:49.819 00:00:00.000 UDP 28.104.0.1:37999 -> 198.28.0.2:53 1 64 1 2025-11-30 03:50:49.819 00:00:00.000 UDP 28.104.0.1:35474 -> 198.28.0.2:53 1 64 1 2025-11-30 03:50:49.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37999 1 109 1 2025-11-30 03:50:49.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35474 1 80 1 2025-11-30 03:47:27.353 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2740 1 2025-11-30 03:51:50.109 00:00:00.000 UDP 28.104.0.1:40367 -> 198.28.0.2:53 1 64 1 2025-11-30 03:51:50.109 00:00:00.000 UDP 28.104.0.1:53527 -> 198.28.0.2:53 1 64 1 2025-11-30 03:51:50.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40367 1 109 1 2025-11-30 03:51:50.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53527 1 80 1 2025-11-30 03:48:14.444 00:05:00.559 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 03:52:50.402 00:00:00.000 UDP 28.104.0.1:58515 -> 198.28.0.2:53 1 64 1 2025-11-30 03:52:50.402 00:00:00.000 UDP 28.104.0.1:39423 -> 198.28.0.2:53 1 64 1 2025-11-30 03:52:50.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58515 1 109 1 2025-11-30 03:52:50.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39423 1 80 1 2025-11-30 03:49:05.788 00:05:08.668 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 03:53:50.712 00:00:00.000 UDP 28.104.0.1:35851 -> 198.28.0.2:53 1 64 1 2025-11-30 03:53:50.712 00:00:00.000 UDP 28.104.0.1:51951 -> 198.28.0.2:53 1 64 1 2025-11-30 03:53:50.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51951 1 109 1 2025-11-30 03:53:50.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35851 1 80 1 2025-11-30 03:49:14.444 00:06:00.506 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 03:50:05.797 00:05:08.649 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 03:50:05.837 00:05:08.770 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 03:54:51.004 00:00:00.000 UDP 28.104.0.1:52152 -> 198.28.0.2:53 1 64 1 2025-11-30 03:54:51.005 00:00:00.000 UDP 28.104.0.1:45145 -> 198.28.0.2:53 1 64 1 2025-11-30 03:54:51.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45145 1 80 1 2025-11-30 03:54:51.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52152 1 109 1 2025-11-30 03:54:56.968 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:51:05.789 00:05:08.832 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:55:51.325 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40908 1 109 1 2025-11-30 03:55:51.325 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58292 1 80 1 2025-11-30 03:55:51.313 00:00:00.000 UDP 28.104.0.1:40908 -> 198.28.0.2:53 1 64 1 2025-11-30 03:55:51.313 00:00:00.000 UDP 28.104.0.1:58292 -> 198.28.0.2:53 1 64 1 2025-11-30 03:56:51.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49142 1 109 1 2025-11-30 03:56:51.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35655 1 80 1 2025-11-30 03:56:51.566 00:00:00.000 UDP 28.104.0.1:35655 -> 198.28.0.2:53 1 64 1 2025-11-30 03:56:51.567 00:00:00.000 UDP 28.104.0.1:49142 -> 198.28.0.2:53 1 64 1 2025-11-30 03:52:47.355 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2600 1 2025-11-30 03:57:51.862 00:00:00.000 UDP 28.104.0.1:58559 -> 198.28.0.2:53 1 64 1 2025-11-30 03:57:51.862 00:00:00.000 UDP 28.104.0.1:57120 -> 198.28.0.2:53 1 64 1 2025-11-30 03:57:51.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57120 1 109 1 2025-11-30 03:57:51.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58559 1 80 1 2025-11-30 03:54:14.446 00:05:00.624 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 03:58:52.144 00:00:00.000 UDP 28.104.0.1:33731 -> 198.28.0.2:53 1 64 1 2025-11-30 03:58:52.144 00:00:00.000 UDP 28.104.0.1:34495 -> 198.28.0.2:53 1 64 1 2025-11-30 03:58:52.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34495 1 109 1 2025-11-30 03:58:52.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33731 1 80 1 Summary: total flows: 320, total bytes: 94235, total packets: 1388, avg bps: 195, avg pps: 0, avg bpp: 67 Time window: 2025-11-30 02:55:05 - 2025-11-30 03:59:15 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0042s User: 0.0032s Wall: 0.0044s flows/second: 73511.7 Runtime: 0.0044s