Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 03:55:05.788 00:05:08.670 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 03:59:52.441 00:00:00.000 UDP 28.104.0.1:48800 -> 198.28.0.2:53 1 64 1 2025-11-30 03:59:52.441 00:00:00.000 UDP 28.104.0.1:35258 -> 198.28.0.2:53 1 64 1 2025-11-30 03:59:52.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35258 1 109 1 2025-11-30 03:59:52.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48800 1 80 1 2025-11-30 03:59:57.440 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 03:56:05.798 00:05:08.650 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 03:56:05.838 00:05:08.766 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 04:00:52.764 00:00:00.000 UDP 28.104.0.1:35602 -> 198.28.0.2:53 1 64 1 2025-11-30 04:00:52.764 00:00:00.000 UDP 28.104.0.1:35044 -> 198.28.0.2:53 1 64 1 2025-11-30 04:00:52.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35602 1 80 1 2025-11-30 04:00:52.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35044 1 109 1 2025-11-30 03:57:05.789 00:05:08.826 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 03:56:14.447 00:06:00.505 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 04:01:53.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35822 1 109 1 2025-11-30 04:01:53.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33002 1 80 1 2025-11-30 04:01:53.061 00:00:00.000 UDP 28.104.0.1:33002 -> 198.28.0.2:53 1 64 1 2025-11-30 04:01:53.061 00:00:00.000 UDP 28.104.0.1:35822 -> 198.28.0.2:53 1 64 1 2025-11-30 03:58:07.361 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-30 04:02:53.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45198 1 80 1 2025-11-30 04:02:53.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45082 1 109 1 2025-11-30 04:02:53.353 00:00:00.000 UDP 28.104.0.1:45082 -> 198.28.0.2:53 1 64 1 2025-11-30 04:02:53.353 00:00:00.000 UDP 28.104.0.1:45198 -> 198.28.0.2:53 1 64 1 2025-11-30 04:03:53.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38993 1 109 1 2025-11-30 04:03:53.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59387 1 80 1 2025-11-30 04:03:53.645 00:00:00.000 UDP 28.104.0.1:38993 -> 198.28.0.2:53 1 64 1 2025-11-30 04:03:53.645 00:00:00.000 UDP 28.104.0.1:59387 -> 198.28.0.2:53 1 64 1 2025-11-30 04:00:14.447 00:05:00.624 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 04:04:53.943 00:00:00.000 UDP 28.104.0.1:59298 -> 198.28.0.2:53 1 64 1 2025-11-30 04:04:53.943 00:00:00.000 UDP 28.104.0.1:50891 -> 198.28.0.2:53 1 64 1 2025-11-30 04:04:53.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59298 1 109 1 2025-11-30 04:04:53.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50891 1 80 1 2025-11-30 04:04:57.333 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:01:05.791 00:05:08.669 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 04:05:54.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37589 1 80 1 2025-11-30 04:05:54.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45577 1 109 1 2025-11-30 04:05:54.244 00:00:00.000 UDP 28.104.0.1:45577 -> 198.28.0.2:53 1 64 1 2025-11-30 04:05:54.244 00:00:00.000 UDP 28.104.0.1:37589 -> 198.28.0.2:53 1 64 1 2025-11-30 04:02:05.800 00:05:08.650 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 04:02:05.840 00:05:08.767 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 04:06:54.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58478 1 80 1 2025-11-30 04:06:54.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43741 1 109 1 2025-11-30 04:06:54.535 00:00:00.000 UDP 28.104.0.1:43741 -> 198.28.0.2:53 1 64 1 2025-11-30 04:06:54.535 00:00:00.000 UDP 28.104.0.1:58478 -> 198.28.0.2:53 1 64 1 2025-11-30 04:03:05.790 00:05:08.827 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 04:03:27.371 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2532 1 2025-11-30 04:07:54.795 00:00:00.000 UDP 28.104.0.1:50415 -> 198.28.0.2:53 1 64 1 2025-11-30 04:07:54.795 00:00:00.000 UDP 28.104.0.1:52582 -> 198.28.0.2:53 1 64 1 2025-11-30 04:07:54.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52582 1 109 1 2025-11-30 04:07:54.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50415 1 80 1 2025-11-30 04:03:14.449 00:06:00.504 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 04:08:55.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45657 1 80 1 2025-11-30 04:08:55.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34652 1 109 1 2025-11-30 04:08:55.093 00:00:00.000 UDP 28.104.0.1:34652 -> 198.28.0.2:53 1 64 1 2025-11-30 04:08:55.093 00:00:00.000 UDP 28.104.0.1:45657 -> 198.28.0.2:53 1 64 1 2025-11-30 04:09:57.534 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:09:55.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33613 1 80 1 2025-11-30 04:09:55.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58760 1 109 1 2025-11-30 04:09:55.343 00:00:00.000 UDP 28.104.0.1:33613 -> 198.28.0.2:53 1 64 1 2025-11-30 04:09:55.343 00:00:00.000 UDP 28.104.0.1:58760 -> 198.28.0.2:53 1 64 1 2025-11-30 04:06:14.450 00:05:00.622 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 04:10:55.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43922 1 109 1 2025-11-30 04:10:55.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37445 1 80 1 2025-11-30 04:10:55.634 00:00:00.000 UDP 28.104.0.1:37445 -> 198.28.0.2:53 1 64 1 2025-11-30 04:10:55.634 00:00:00.000 UDP 28.104.0.1:43922 -> 198.28.0.2:53 1 64 1 2025-11-30 04:07:05.793 00:05:08.668 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 04:11:55.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39376 1 80 1 2025-11-30 04:11:55.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53676 1 109 1 2025-11-30 04:11:55.930 00:00:00.000 UDP 28.104.0.1:53676 -> 198.28.0.2:53 1 64 1 2025-11-30 04:11:55.930 00:00:00.000 UDP 28.104.0.1:39376 -> 198.28.0.2:53 1 64 1 2025-11-30 04:08:05.803 00:05:08.647 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 04:08:05.843 00:05:08.766 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 04:12:56.194 00:00:00.000 UDP 28.104.0.1:49277 -> 198.28.0.2:53 1 64 1 2025-11-30 04:12:56.194 00:00:00.000 UDP 28.104.0.1:34221 -> 198.28.0.2:53 1 64 1 2025-11-30 04:08:47.374 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2560 1 2025-11-30 04:12:56.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49277 1 109 1 2025-11-30 04:12:56.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34221 1 80 1 2025-11-30 04:09:05.792 00:05:08.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 04:13:57.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57531 1 109 1 2025-11-30 04:13:57.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50054 1 80 1 2025-11-30 04:13:57.454 00:00:00.000 UDP 28.104.0.1:50054 -> 198.28.0.2:53 1 64 1 2025-11-30 04:13:57.454 00:00:00.000 UDP 28.104.0.1:57531 -> 198.28.0.2:53 1 64 1 2025-11-30 04:14:57.753 00:00:00.000 UDP 28.104.0.1:32916 -> 198.28.0.2:53 1 64 1 2025-11-30 04:14:57.753 00:00:00.000 UDP 28.104.0.1:42806 -> 198.28.0.2:53 1 64 1 2025-11-30 04:14:57.372 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:14:57.762 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32916 1 80 1 2025-11-30 04:14:57.762 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42806 1 109 1 2025-11-30 04:10:14.451 00:06:00.506 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 04:15:58.054 00:00:00.000 UDP 28.104.0.1:40198 -> 198.28.0.2:53 1 64 1 2025-11-30 04:15:58.054 00:00:00.000 UDP 28.104.0.1:42490 -> 198.28.0.2:53 1 64 1 2025-11-30 04:15:58.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42490 1 80 1 2025-11-30 04:15:58.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40198 1 109 1 2025-11-30 04:12:14.450 00:05:00.624 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 04:16:58.355 00:00:00.000 UDP 28.104.0.1:45687 -> 198.28.0.2:53 1 64 1 2025-11-30 04:16:58.355 00:00:00.000 UDP 28.104.0.1:55521 -> 198.28.0.2:53 1 64 1 2025-11-30 04:16:58.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55521 1 80 1 2025-11-30 04:16:58.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45687 1 109 1 2025-11-30 04:13:05.793 00:05:08.671 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 04:17:58.629 00:00:00.000 UDP 28.104.0.1:47182 -> 198.28.0.2:53 1 64 1 2025-11-30 04:17:58.630 00:00:00.000 UDP 28.104.0.1:48842 -> 198.28.0.2:53 1 64 1 2025-11-30 04:17:58.638 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48842 1 109 1 2025-11-30 04:17:58.638 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47182 1 80 1 2025-11-30 04:14:07.377 00:05:00.889 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2840 1 2025-11-30 04:14:05.803 00:05:08.653 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 04:14:05.843 00:05:08.769 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 04:18:58.891 00:00:00.000 UDP 28.104.0.1:40813 -> 198.28.0.2:53 1 64 1 2025-11-30 04:18:58.891 00:00:00.000 UDP 28.104.0.1:54971 -> 198.28.0.2:53 1 64 1 2025-11-30 04:18:58.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54971 1 80 1 2025-11-30 04:18:58.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40813 1 109 1 2025-11-30 04:15:05.793 00:05:08.829 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 04:19:57.706 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:19:59.195 00:00:00.000 UDP 28.104.0.1:49174 -> 198.28.0.2:53 1 64 1 2025-11-30 04:19:59.195 00:00:00.000 UDP 28.104.0.1:41948 -> 198.28.0.2:53 1 64 1 2025-11-30 04:19:59.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41948 1 80 1 2025-11-30 04:19:59.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49174 1 109 1 2025-11-30 04:20:59.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45379 1 109 1 2025-11-30 04:20:59.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53513 1 80 1 2025-11-30 04:20:59.489 00:00:00.000 UDP 28.104.0.1:53513 -> 198.28.0.2:53 1 64 1 2025-11-30 04:20:59.489 00:00:00.000 UDP 28.104.0.1:45379 -> 198.28.0.2:53 1 64 1 2025-11-30 04:21:59.788 00:00:00.000 UDP 28.104.0.1:44707 -> 198.28.0.2:53 1 64 1 2025-11-30 04:21:59.788 00:00:00.000 UDP 28.104.0.1:34446 -> 198.28.0.2:53 1 64 1 2025-11-30 04:21:59.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44707 1 109 1 2025-11-30 04:21:59.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34446 1 80 1 2025-11-30 04:17:14.453 00:06:00.505 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 04:18:14.453 00:05:00.622 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 04:23:00.087 00:00:00.000 UDP 28.104.0.1:52312 -> 198.28.0.2:53 1 64 1 2025-11-30 04:23:00.087 00:00:00.000 UDP 28.104.0.1:50946 -> 198.28.0.2:53 1 64 1 2025-11-30 04:23:00.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50946 1 80 1 2025-11-30 04:23:00.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52312 1 109 1 2025-11-30 04:19:05.795 00:05:08.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 04:19:17.379 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-11-30 04:24:00.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47734 1 80 1 2025-11-30 04:24:00.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41519 1 109 1 2025-11-30 04:24:00.380 00:00:00.000 UDP 28.104.0.1:47734 -> 198.28.0.2:53 1 64 1 2025-11-30 04:24:00.380 00:00:00.000 UDP 28.104.0.1:41519 -> 198.28.0.2:53 1 64 1 2025-11-30 04:20:05.805 00:05:08.653 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 04:20:05.845 00:05:08.769 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 04:24:57.851 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:25:00.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48104 1 80 1 2025-11-30 04:25:00.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45700 1 109 1 2025-11-30 04:25:00.671 00:00:00.000 UDP 28.104.0.1:48104 -> 198.28.0.2:53 1 64 1 2025-11-30 04:25:00.671 00:00:00.000 UDP 28.104.0.1:45700 -> 198.28.0.2:53 1 64 1 2025-11-30 04:21:05.796 00:05:08.829 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 04:26:00.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51773 1 80 1 2025-11-30 04:26:00.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43135 1 109 1 2025-11-30 04:26:00.960 00:00:00.000 UDP 28.104.0.1:51773 -> 198.28.0.2:53 1 64 1 2025-11-30 04:26:00.960 00:00:00.000 UDP 28.104.0.1:43135 -> 198.28.0.2:53 1 64 1 2025-11-30 04:27:01.258 00:00:00.000 UDP 28.104.0.1:50997 -> 198.28.0.2:53 1 64 1 2025-11-30 04:27:01.258 00:00:00.000 UDP 28.104.0.1:40989 -> 198.28.0.2:53 1 64 1 2025-11-30 04:27:01.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50997 1 109 1 2025-11-30 04:27:01.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40989 1 80 1 2025-11-30 04:28:01.545 00:00:00.000 UDP 28.104.0.1:36354 -> 198.28.0.2:53 1 64 1 2025-11-30 04:28:01.545 00:00:00.000 UDP 28.104.0.1:47368 -> 198.28.0.2:53 1 64 1 2025-11-30 04:28:01.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36354 1 80 1 2025-11-30 04:28:01.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47368 1 109 1 2025-11-30 04:24:14.458 00:05:00.623 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 04:24:37.389 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-11-30 04:29:01.812 00:00:00.000 UDP 28.104.0.1:59028 -> 198.28.0.2:53 1 64 1 2025-11-30 04:29:01.812 00:00:00.000 UDP 28.104.0.1:59991 -> 198.28.0.2:53 1 64 1 2025-11-30 04:29:01.823 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59991 1 109 1 2025-11-30 04:29:01.823 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59028 1 80 1 2025-11-30 04:25:05.796 00:05:08.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 04:24:14.459 00:06:00.501 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 04:29:57.789 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:30:02.110 00:00:00.000 UDP 28.104.0.1:38830 -> 198.28.0.2:53 1 64 1 2025-11-30 04:30:02.110 00:00:00.000 UDP 28.104.0.1:55032 -> 198.28.0.2:53 1 64 1 2025-11-30 04:30:02.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55032 1 80 1 2025-11-30 04:30:02.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38830 1 109 1 2025-11-30 04:26:05.807 00:05:08.654 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 04:26:05.847 00:05:08.769 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 04:31:02.416 00:00:00.000 UDP 28.104.0.1:53046 -> 198.28.0.2:53 1 64 1 2025-11-30 04:31:02.416 00:00:00.000 UDP 28.104.0.1:60658 -> 198.28.0.2:53 1 64 1 2025-11-30 04:31:02.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53046 1 109 1 2025-11-30 04:31:02.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60658 1 80 1 2025-11-30 04:27:05.798 00:05:08.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 04:32:02.708 00:00:00.000 UDP 28.104.0.1:60002 -> 198.28.0.2:53 1 64 1 2025-11-30 04:32:02.708 00:00:00.000 UDP 28.104.0.1:46736 -> 198.28.0.2:53 1 64 1 2025-11-30 04:32:02.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46736 1 80 1 2025-11-30 04:32:02.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60002 1 109 1 2025-11-30 04:33:03.056 00:00:00.000 UDP 28.104.0.1:33178 -> 198.28.0.2:53 1 64 1 2025-11-30 04:33:03.056 00:00:00.000 UDP 28.104.0.1:43901 -> 198.28.0.2:53 1 64 1 2025-11-30 04:33:03.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33178 1 80 1 2025-11-30 04:33:03.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43901 1 109 1 2025-11-30 04:34:03.350 00:00:00.000 UDP 28.104.0.1:54742 -> 198.28.0.2:53 1 64 1 2025-11-30 04:34:03.350 00:00:00.000 UDP 28.104.0.1:39668 -> 198.28.0.2:53 1 64 1 2025-11-30 04:34:03.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39668 1 109 1 2025-11-30 04:34:03.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54742 1 80 1 2025-11-30 04:29:57.393 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2532 1 2025-11-30 04:30:14.459 00:05:00.625 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 04:34:58.319 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:35:03.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34417 1 80 1 2025-11-30 04:35:03.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48967 1 109 1 2025-11-30 04:35:03.646 00:00:00.000 UDP 28.104.0.1:48967 -> 198.28.0.2:53 1 64 1 2025-11-30 04:35:03.646 00:00:00.000 UDP 28.104.0.1:34417 -> 198.28.0.2:53 1 64 1 2025-11-30 04:31:05.800 00:05:08.678 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 04:36:03.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34878 1 80 1 2025-11-30 04:36:03.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55808 1 109 1 2025-11-30 04:36:03.936 00:00:00.000 UDP 28.104.0.1:34878 -> 198.28.0.2:53 1 64 1 2025-11-30 04:36:03.936 00:00:00.000 UDP 28.104.0.1:55808 -> 198.28.0.2:53 1 64 1 2025-11-30 04:31:14.461 00:06:00.499 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 04:32:05.810 00:05:08.657 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 04:32:05.850 00:05:08.767 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 04:37:04.194 00:00:00.000 UDP 28.104.0.1:40941 -> 198.28.0.2:53 1 64 1 2025-11-30 04:37:04.193 00:00:00.000 UDP 28.104.0.1:52141 -> 198.28.0.2:53 1 64 1 2025-11-30 04:37:04.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40941 1 109 1 2025-11-30 04:37:04.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52141 1 80 1 2025-11-30 04:33:05.799 00:05:08.827 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 04:38:04.492 00:00:00.000 UDP 28.104.0.1:41710 -> 198.28.0.2:53 1 64 1 2025-11-30 04:38:04.492 00:00:00.000 UDP 28.104.0.1:33201 -> 198.28.0.2:53 1 64 1 2025-11-30 04:38:04.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41710 1 80 1 2025-11-30 04:38:04.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33201 1 109 1 2025-11-30 04:39:04.792 00:00:00.000 UDP 28.104.0.1:44615 -> 198.28.0.2:53 1 64 1 2025-11-30 04:39:04.792 00:00:00.000 UDP 28.104.0.1:36760 -> 198.28.0.2:53 1 64 1 2025-11-30 04:39:04.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36760 1 80 1 2025-11-30 04:39:04.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44615 1 109 1 2025-11-30 04:35:17.406 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-30 04:39:58.077 00:00:00.036 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:40:05.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37047 1 109 1 2025-11-30 04:40:05.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52418 1 80 1 2025-11-30 04:40:05.099 00:00:00.000 UDP 28.104.0.1:37047 -> 198.28.0.2:53 1 64 1 2025-11-30 04:40:05.099 00:00:00.000 UDP 28.104.0.1:52418 -> 198.28.0.2:53 1 64 1 2025-11-30 04:36:14.468 00:05:00.619 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 04:41:05.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54517 1 109 1 2025-11-30 04:41:05.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60776 1 80 1 2025-11-30 04:41:05.392 00:00:00.000 UDP 28.104.0.1:60776 -> 198.28.0.2:53 1 64 1 2025-11-30 04:41:05.393 00:00:00.000 UDP 28.104.0.1:54517 -> 198.28.0.2:53 1 64 1 2025-11-30 04:37:05.800 00:05:08.681 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 04:42:05.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34278 1 80 1 2025-11-30 04:42:05.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34226 1 109 1 2025-11-30 04:42:05.647 00:00:00.000 UDP 28.104.0.1:34226 -> 198.28.0.2:53 1 64 1 2025-11-30 04:42:05.647 00:00:00.000 UDP 28.104.0.1:34278 -> 198.28.0.2:53 1 64 1 2025-11-30 04:38:05.810 00:05:08.661 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 04:38:05.850 00:05:08.768 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 04:43:05.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58680 1 80 1 2025-11-30 04:43:05.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35054 1 109 1 2025-11-30 04:43:05.988 00:00:00.000 UDP 28.104.0.1:58680 -> 198.28.0.2:53 1 64 1 2025-11-30 04:43:05.987 00:00:00.000 UDP 28.104.0.1:35054 -> 198.28.0.2:53 1 64 1 2025-11-30 04:39:05.800 00:05:08.829 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 04:38:14.468 00:06:00.495 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 04:44:06.415 00:00:00.000 UDP 28.104.0.1:44831 -> 198.28.0.2:53 1 64 1 2025-11-30 04:44:06.415 00:00:00.000 UDP 28.104.0.1:60347 -> 198.28.0.2:53 1 64 1 2025-11-30 04:44:06.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60347 1 80 1 2025-11-30 04:44:06.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44831 1 109 1 2025-11-30 04:40:37.410 00:05:10.001 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2840 1 2025-11-30 04:44:58.246 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:45:06.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35434 1 109 1 2025-11-30 04:45:06.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32941 1 80 1 2025-11-30 04:45:06.712 00:00:00.000 UDP 28.104.0.1:35434 -> 198.28.0.2:53 1 64 1 2025-11-30 04:45:06.712 00:00:00.000 UDP 28.104.0.1:32941 -> 198.28.0.2:53 1 64 1 2025-11-30 04:46:07.038 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53152 1 80 1 2025-11-30 04:46:07.040 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35880 1 109 1 2025-11-30 04:46:07.030 00:00:00.000 UDP 28.104.0.1:35880 -> 198.28.0.2:53 1 64 1 2025-11-30 04:46:07.029 00:00:00.000 UDP 28.104.0.1:53152 -> 198.28.0.2:53 1 64 1 2025-11-30 04:42:14.471 00:05:00.617 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 04:47:07.346 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39429 1 109 1 2025-11-30 04:47:07.345 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51070 1 80 1 2025-11-30 04:47:07.333 00:00:00.000 UDP 28.104.0.1:39429 -> 198.28.0.2:53 1 64 1 2025-11-30 04:47:07.333 00:00:00.000 UDP 28.104.0.1:51070 -> 198.28.0.2:53 1 64 1 2025-11-30 04:43:05.801 00:05:08.682 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 04:48:07.727 00:00:00.000 UDP 28.104.0.1:40730 -> 198.28.0.2:53 1 64 1 2025-11-30 04:48:07.727 00:00:00.000 UDP 28.104.0.1:44666 -> 198.28.0.2:53 1 64 1 2025-11-30 04:48:07.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40730 1 109 1 2025-11-30 04:48:07.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44666 1 80 1 2025-11-30 04:44:05.852 00:05:08.769 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 04:44:05.812 00:05:08.661 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 04:49:08.049 00:00:00.000 UDP 28.104.0.1:38423 -> 198.28.0.2:53 1 64 1 2025-11-30 04:49:08.049 00:00:00.000 UDP 28.104.0.1:46749 -> 198.28.0.2:53 1 64 1 2025-11-30 04:49:08.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38423 1 109 1 2025-11-30 04:49:08.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46749 1 80 1 2025-11-30 04:45:05.803 00:05:08.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 04:49:58.473 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:50:08.342 00:00:00.000 UDP 28.104.0.1:57216 -> 198.28.0.2:53 1 64 1 2025-11-30 04:50:08.341 00:00:00.000 UDP 28.104.0.1:54609 -> 198.28.0.2:53 1 64 1 2025-11-30 04:45:57.412 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2724 1 2025-11-30 04:50:08.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57216 1 109 1 2025-11-30 04:50:08.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54609 1 80 1 2025-11-30 04:45:14.470 00:06:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 04:51:08.631 00:00:00.000 UDP 28.104.0.1:35293 -> 198.28.0.2:53 1 64 1 2025-11-30 04:51:08.631 00:00:00.000 UDP 28.104.0.1:59624 -> 198.28.0.2:53 1 64 1 2025-11-30 04:51:08.642 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35293 1 80 1 2025-11-30 04:51:08.642 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59624 1 109 1 2025-11-30 04:52:08.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35925 1 80 1 2025-11-30 04:52:08.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56072 1 109 1 2025-11-30 04:52:08.888 00:00:00.000 UDP 28.104.0.1:56072 -> 198.28.0.2:53 1 64 1 2025-11-30 04:52:08.888 00:00:00.000 UDP 28.104.0.1:35925 -> 198.28.0.2:53 1 64 1 2025-11-30 04:48:14.472 00:05:00.620 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-30 04:53:09.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45874 1 80 1 2025-11-30 04:53:09.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50009 1 109 1 2025-11-30 04:53:09.213 00:00:00.000 UDP 28.104.0.1:45874 -> 198.28.0.2:53 1 64 1 2025-11-30 04:53:09.213 00:00:00.000 UDP 28.104.0.1:50009 -> 198.28.0.2:53 1 64 1 2025-11-30 04:49:05.804 00:05:08.680 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 04:54:09.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56540 1 80 1 2025-11-30 04:54:09.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35531 1 109 1 2025-11-30 04:54:09.499 00:00:00.000 UDP 28.104.0.1:56540 -> 198.28.0.2:53 1 64 1 2025-11-30 04:54:09.499 00:00:00.000 UDP 28.104.0.1:35531 -> 198.28.0.2:53 1 64 1 2025-11-30 04:50:05.814 00:05:08.659 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 04:50:05.854 00:05:08.768 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 04:54:58.671 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 04:55:09.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32990 1 109 1 2025-11-30 04:55:09.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56190 1 80 1 2025-11-30 04:55:09.766 00:00:00.000 UDP 28.104.0.1:32990 -> 198.28.0.2:53 1 64 1 2025-11-30 04:55:09.766 00:00:00.000 UDP 28.104.0.1:56190 -> 198.28.0.2:53 1 64 1 2025-11-30 04:51:05.803 00:05:08.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 04:51:17.416 00:05:10.047 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-30 04:56:10.069 00:00:00.000 UDP 28.104.0.1:60614 -> 198.28.0.2:53 1 64 1 2025-11-30 04:56:10.069 00:00:00.000 UDP 28.104.0.1:41213 -> 198.28.0.2:53 1 64 1 2025-11-30 04:56:10.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60614 1 80 1 2025-11-30 04:56:10.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41213 1 109 1 2025-11-30 04:57:10.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49228 1 80 1 2025-11-30 04:57:10.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57747 1 109 1 2025-11-30 04:57:10.316 00:00:00.000 UDP 28.104.0.1:57747 -> 198.28.0.2:53 1 64 1 2025-11-30 04:57:10.315 00:00:00.000 UDP 28.104.0.1:49228 -> 198.28.0.2:53 1 64 1 2025-11-30 04:52:14.472 00:06:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 04:58:10.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35205 1 80 1 2025-11-30 04:58:10.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34375 1 109 1 2025-11-30 04:58:10.793 00:00:00.000 UDP 28.104.0.1:35205 -> 198.28.0.2:53 1 64 1 2025-11-30 04:58:10.793 00:00:00.000 UDP 28.104.0.1:34375 -> 198.28.0.2:53 1 64 1 2025-11-30 04:54:14.473 00:05:00.620 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 Summary: total flows: 318, total bytes: 94676, total packets: 1396, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-11-30 03:55:05 - 2025-11-30 04:59:15 Total flows processed: 318, passed: 318, Blocks skipped: 0, Bytes read: 33136 Sys: 0.0053s User: 0.0018s Wall: 0.0031s flows/second: 102151.2 Runtime: 0.0031s