Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 08:54:11.335 00:05:51.783 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-24 08:56:03.404 00:05:07.972 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-24 09:02:10.207 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:02:10.198 00:00:00.021 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 08:58:03.425 00:05:07.891 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-24 09:02:10.397 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:02:10.190 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:02:10.357 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:02:10.369 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:58:58.947 00:05:09.303 OSPF 24.0.7.1:0 -> 224.0.0.5:0 34 2384 1 2025-11-24 08:59:03.137 00:05:08.179 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-24 09:00:03.607 00:05:07.750 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-24 09:00:11.335 00:05:51.784 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-24 09:02:03.405 00:05:07.971 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-24 09:07:09.919 00:00:00.024 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:07:09.913 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:07:09.919 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:07:09.924 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:07:09.915 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:07:10.083 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:04:03.425 00:05:07.892 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-24 09:04:18.251 00:05:10.001 OSPF 24.0.7.1:0 -> 224.0.0.5:0 36 2504 1 2025-11-24 09:05:03.139 00:05:08.178 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-24 09:06:03.608 00:05:07.750 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-24 09:06:11.336 00:05:51.786 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-24 09:08:03.407 00:05:07.976 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-24 09:12:10.276 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:12:10.263 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:12:10.105 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:12:10.261 00:00:00.024 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:12:10.172 00:00:00.024 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:12:10.251 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:09:38.251 00:05:10.004 OSPF 24.0.7.1:0 -> 224.0.0.5:0 39 2672 1 2025-11-24 09:10:03.427 00:05:07.892 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-24 09:11:03.141 00:05:08.177 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-24 09:12:03.613 00:05:07.746 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-24 09:12:11.339 00:05:51.787 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-24 09:17:10.618 00:00:00.028 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:17:10.356 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:17:10.275 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:17:10.484 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:17:10.450 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:17:10.447 00:00:00.028 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:14:03.407 00:05:07.972 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-24 09:14:58.256 00:05:10.011 OSPF 24.0.7.1:0 -> 224.0.0.5:0 45 3404 1 2025-11-24 09:16:03.428 00:05:07.892 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-24 09:17:03.145 00:05:08.176 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-24 09:22:10.407 00:00:00.021 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:22:10.459 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:22:10.455 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:22:10.405 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:22:10.462 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:22:10.630 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:18:03.616 00:05:07.746 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-24 09:18:11.339 00:05:51.787 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-24 09:20:03.409 00:05:07.974 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-24 09:20:18.267 00:05:10.010 OSPF 24.0.7.1:0 -> 224.0.0.5:0 35 2416 1 2025-11-24 09:22:03.429 00:05:07.894 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-24 09:27:10.494 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:27:10.598 00:00:00.021 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:27:10.324 00:00:00.021 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:27:10.218 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:27:10.508 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:23:03.147 00:05:08.178 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-24 09:27:10.411 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:24:03.619 00:05:07.747 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-24 09:24:11.343 00:05:51.786 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-24 09:25:38.277 00:05:10.008 OSPF 24.0.7.1:0 -> 224.0.0.5:0 38 2784 1 2025-11-24 09:26:03.411 00:05:07.976 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-24 09:32:10.770 00:00:00.021 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:32:10.600 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:32:10.601 00:00:00.021 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:28:03.431 00:05:07.895 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-24 09:32:10.674 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:32:10.598 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:32:10.536 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:29:03.147 00:05:08.179 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-24 09:30:03.620 00:05:07.747 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-24 09:30:11.345 00:05:51.784 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-24 09:30:58.286 00:05:10.007 OSPF 24.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-24 09:32:03.413 00:05:07.973 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-24 09:37:10.780 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:37:10.686 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:37:10.611 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:37:10.684 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:37:10.685 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:37:10.686 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:34:03.434 00:05:07.894 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-24 09:35:03.149 00:05:08.179 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-24 09:36:03.622 00:05:07.746 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-24 09:36:18.294 00:05:10.008 OSPF 24.0.7.1:0 -> 224.0.0.5:0 37 2624 1 2025-11-24 09:36:11.346 00:05:51.787 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-24 09:42:11.786 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:42:11.603 00:00:00.021 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:42:11.742 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:42:10.928 00:00:00.039 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:42:11.752 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:38:03.416 00:05:07.974 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-24 09:42:11.775 00:00:00.020 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:40:03.436 00:05:07.899 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-24 09:41:03.153 00:05:08.182 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-24 09:41:38.300 00:05:10.008 OSPF 24.0.7.1:0 -> 224.0.0.5:0 44 3380 1 2025-11-24 09:42:03.623 00:05:07.752 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-24 09:42:11.348 00:05:51.787 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-24 09:47:10.876 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:47:10.879 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:47:10.705 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:47:10.883 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:47:10.808 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:47:10.812 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:44:03.421 00:05:07.974 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-24 09:46:03.440 00:05:07.895 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-24 09:46:58.309 00:05:10.006 OSPF 24.0.7.1:0 -> 224.0.0.5:0 37 2576 1 2025-11-24 09:47:03.154 00:05:08.181 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-24 09:52:10.916 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:52:10.992 00:00:00.025 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:52:10.914 00:00:00.024 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:52:10.991 00:00:00.024 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:52:11.039 00:00:00.045 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:48:03.626 00:05:07.751 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-24 09:52:11.163 00:00:00.024 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:48:11.357 00:05:51.780 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-24 09:50:03.421 00:05:07.975 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-24 09:52:03.442 00:05:07.895 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-24 09:52:18.316 00:05:10.007 OSPF 24.0.7.1:0 -> 224.0.0.5:0 38 2784 1 2025-11-24 09:57:11.357 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:57:11.150 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-24 09:57:11.189 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-24 09:57:11.103 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-24 09:57:11.102 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-24 09:53:03.157 00:05:08.183 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-24 09:57:11.144 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-24 09:54:03.630 00:05:07.750 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 Summary: total flows: 133, total bytes: 84892, total packets: 1233, avg bps: 174, avg pps: 0, avg bpp: 68 Time window: 2025-11-24 08:54:11 - 2025-11-24 09:59:11 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0028s User: 0.0019s Wall: 0.0027s flows/second: 48933.5 Runtime: 0.0027s