Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 01:56:52.731 00:05:07.369 TCP 11.153.0.1:38629 -> 11.151.0.1:179 12 738 1 2025-11-02 02:01:24.674 00:00:00.022 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:01:24.589 00:00:00.021 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:01:24.687 00:00:00.021 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:01:24.450 00:00:00.021 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:01:24.619 00:00:00.022 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:01:24.572 00:00:00.021 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:01:24.578 00:00:00.022 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:01:24.493 00:00:00.023 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:01:24.414 00:00:00.022 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 01:58:52.741 00:05:07.349 TCP 11.151.0.1:179 -> 11.153.0.1:38629 12 738 1 2025-11-02 01:59:01.947 00:05:00.185 OSPF 11.0.3.2:0 -> 224.0.0.5:0 32 2172 1 2025-11-02 02:06:24.557 00:00:00.022 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:06:24.687 00:00:00.022 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:06:24.733 00:00:00.023 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:06:24.695 00:00:00.022 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:06:24.724 00:00:00.022 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:06:24.683 00:00:00.023 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:06:24.782 00:00:00.022 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:06:24.754 00:00:00.022 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:06:24.806 00:00:00.023 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:02:52.733 00:05:07.369 TCP 11.153.0.1:38629 -> 11.151.0.1:179 12 738 1 2025-11-02 02:04:11.964 00:05:10.008 OSPF 11.0.3.2:0 -> 224.0.0.5:0 37 2568 1 2025-11-02 02:04:52.742 00:05:07.349 TCP 11.151.0.1:179 -> 11.153.0.1:38629 12 738 1 2025-11-02 02:11:25.415 00:00:00.023 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:11:25.296 00:00:00.024 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:11:25.077 00:00:00.022 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:11:25.183 00:00:00.022 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:11:24.965 00:00:00.023 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:11:25.287 00:00:00.023 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:11:24.875 00:00:00.024 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:11:24.840 00:00:00.023 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:11:25.149 00:00:00.022 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:08:52.734 00:05:07.369 TCP 11.153.0.1:38629 -> 11.151.0.1:179 12 738 1 2025-11-02 02:09:31.974 00:05:10.006 OSPF 11.0.3.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-02 02:10:52.743 00:05:07.351 TCP 11.151.0.1:179 -> 11.153.0.1:38629 12 738 1 2025-11-02 02:16:25.104 00:00:00.022 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:16:25.050 00:00:00.021 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:16:24.805 00:00:00.024 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:16:24.979 00:00:00.023 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:16:25.150 00:00:00.021 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:16:25.064 00:00:00.022 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:16:24.766 00:00:00.024 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:16:24.978 00:00:00.024 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:16:24.731 00:00:00.024 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:14:51.980 00:05:10.010 OSPF 11.0.3.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-02 02:14:52.734 00:05:07.371 TCP 11.153.0.1:38629 -> 11.151.0.1:179 12 738 1 2025-11-02 02:16:52.743 00:05:07.352 TCP 11.151.0.1:179 -> 11.153.0.1:38629 12 738 1 2025-11-02 02:21:25.085 00:00:00.024 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:21:24.881 00:00:00.023 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:21:25.126 00:00:00.050 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:21:24.987 00:00:00.022 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:21:25.202 00:00:00.022 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:21:25.056 00:00:00.022 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:21:25.082 00:00:00.024 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:21:25.076 00:00:00.022 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:21:24.951 00:00:00.021 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:20:11.989 00:05:10.015 OSPF 11.0.3.2:0 -> 224.0.0.5:0 33 2308 1 2025-11-02 02:20:52.735 00:05:07.372 TCP 11.153.0.1:38629 -> 11.151.0.1:179 12 738 1 2025-11-02 02:26:26.074 00:00:00.022 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:26:26.298 00:00:00.030 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:26:26.119 00:00:00.022 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:26:25.934 00:00:00.023 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:26:26.253 00:00:00.021 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:26:26.144 00:00:00.048 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:26:26.298 00:00:00.030 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:26:26.128 00:00:00.022 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:26:25.900 00:00:00.023 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:22:52.745 00:05:07.352 TCP 11.151.0.1:179 -> 11.153.0.1:38629 12 738 1 2025-11-02 02:25:32.004 00:05:10.034 OSPF 11.0.3.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-02 02:26:52.736 00:05:07.376 TCP 11.153.0.1:38629 -> 11.151.0.1:179 12 738 1 2025-11-02 02:31:25.352 00:00:00.021 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:31:25.352 00:00:00.023 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:31:25.135 00:00:00.021 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:31:25.096 00:00:00.022 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:31:24.988 00:00:00.024 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:31:25.342 00:00:00.022 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:31:25.269 00:00:00.021 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:31:24.971 00:00:00.022 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:31:25.100 00:00:00.021 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:28:52.746 00:05:07.354 TCP 11.151.0.1:179 -> 11.153.0.1:38629 12 738 1 2025-11-02 02:30:52.039 00:05:10.011 OSPF 11.0.3.2:0 -> 224.0.0.5:0 37 2568 1 2025-11-02 02:36:25.361 00:00:00.023 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:36:25.276 00:00:00.021 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:36:25.486 00:00:00.022 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:36:25.285 00:00:00.023 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:36:25.470 00:00:00.022 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:36:25.416 00:00:00.023 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:36:25.524 00:00:00.024 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:36:25.345 00:00:00.022 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:36:25.250 00:00:00.023 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:32:52.736 00:05:07.374 TCP 11.153.0.1:38629 -> 11.151.0.1:179 12 738 1 2025-11-02 02:34:52.748 00:05:07.354 TCP 11.151.0.1:179 -> 11.153.0.1:38629 12 738 1 2025-11-02 02:36:12.050 00:05:10.007 OSPF 11.0.3.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-02 02:41:25.216 00:00:00.023 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:41:25.463 00:00:00.021 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:41:25.311 00:00:00.021 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:41:25.180 00:00:00.023 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:41:25.553 00:00:00.021 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:41:25.431 00:00:00.022 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:41:25.472 00:00:00.022 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:41:25.428 00:00:00.021 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:41:25.146 00:00:00.022 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:38:52.737 00:05:07.376 TCP 11.153.0.1:38629 -> 11.151.0.1:179 12 738 1 2025-11-02 02:40:52.749 00:05:07.356 TCP 11.151.0.1:179 -> 11.153.0.1:38629 12 738 1 2025-11-02 02:41:22.720 00:05:09.344 OSPF 11.0.3.2:0 -> 224.0.0.5:0 32 2172 1 2025-11-02 02:46:26.079 00:00:00.025 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:46:25.863 00:00:00.023 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:46:25.890 00:00:00.023 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:46:25.725 00:00:00.022 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:46:25.736 00:00:00.022 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:46:25.909 00:00:00.024 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:46:25.780 00:00:00.021 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:46:25.611 00:00:00.022 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:46:25.690 00:00:00.022 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:44:52.741 00:05:07.375 TCP 11.153.0.1:38629 -> 11.151.0.1:179 12 738 1 2025-11-02 02:46:42.065 00:05:10.007 OSPF 11.0.3.2:0 -> 224.0.0.5:0 33 2308 1 2025-11-02 02:46:52.753 00:05:07.354 TCP 11.151.0.1:179 -> 11.153.0.1:38629 12 738 1 2025-11-02 02:51:25.353 00:00:00.023 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:51:25.560 00:00:00.024 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:51:25.792 00:00:00.022 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:51:25.623 00:00:00.021 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:51:25.575 00:00:00.022 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:51:25.595 00:00:00.024 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:51:25.479 00:00:00.022 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:51:25.674 00:00:00.022 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:51:25.514 00:00:00.025 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:50:52.742 00:05:07.373 TCP 11.153.0.1:38629 -> 11.151.0.1:179 12 738 1 2025-11-02 02:52:02.073 00:05:10.005 OSPF 11.0.3.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-02 02:56:25.710 00:00:00.022 ICMP 11.0.198.2:0 -> 21.102.0.1:8.0 3 252 1 2025-11-02 02:56:25.568 00:00:00.023 ICMP 11.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-02 02:56:25.742 00:00:00.022 ICMP 27.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:56:25.824 00:00:00.022 ICMP 29.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:56:25.693 00:00:00.022 ICMP 31.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:56:25.603 00:00:00.023 ICMP 12.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:56:25.835 00:00:00.022 ICMP 21.102.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:56:25.715 00:00:00.021 ICMP 23.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:56:25.747 00:00:00.023 ICMP 25.107.0.1:0 -> 11.0.198.2:0.0 3 252 1 2025-11-02 02:52:52.753 00:05:07.353 TCP 11.151.0.1:179 -> 11.153.0.1:38629 12 738 1 Summary: total flows: 139, total bytes: 67080, total packets: 930, avg bps: 146, avg pps: 0, avg bpp: 72 Time window: 2025-11-02 01:56:52 - 2025-11-02 02:58:00 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0018s Wall: 0.0027s flows/second: 51407.1 Runtime: 0.0027s