Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 18:54:13.575 00:05:51.949 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-28 18:59:17.480 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 18:59:17.407 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 18:59:17.472 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 18:59:17.474 00:00:00.021 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 18:59:17.525 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 18:59:17.575 00:00:00.024 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 18:56:05.539 00:05:07.976 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-28 18:57:13.515 00:05:51.632 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-28 18:58:57.003 00:05:10.004 OSPF 24.0.7.1:0 -> 224.0.0.5:0 41 3052 1 2025-11-28 18:59:05.640 00:05:07.915 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-28 18:59:13.535 00:05:51.593 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-28 19:04:17.725 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:04:17.776 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:04:17.728 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:04:17.848 00:00:00.024 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:04:17.675 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:04:17.846 00:00:00.021 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:00:13.575 00:05:51.949 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-28 19:02:05.544 00:05:07.978 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-28 19:03:13.515 00:05:51.633 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-28 19:04:17.006 00:05:10.003 OSPF 24.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-28 19:05:05.643 00:05:07.919 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-28 19:09:18.408 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:09:18.117 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:09:18.237 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:09:18.221 00:00:00.021 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:09:18.419 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:09:18.337 00:00:00.025 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:05:13.538 00:05:51.589 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-28 19:06:13.579 00:05:51.948 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-28 19:08:05.544 00:05:07.978 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-28 19:09:37.010 00:05:10.001 OSPF 24.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-11-28 19:09:13.521 00:05:51.629 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-28 19:14:17.850 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:14:17.696 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:14:17.680 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:14:17.769 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:14:17.777 00:00:00.024 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:14:17.819 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:11:05.642 00:05:07.920 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-28 19:11:13.542 00:05:51.589 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-28 19:12:13.582 00:05:51.947 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-28 19:14:05.547 00:05:07.975 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-28 19:14:57.010 00:05:10.004 OSPF 24.0.7.1:0 -> 224.0.0.5:0 36 2516 1 2025-11-28 19:19:17.946 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:19:17.752 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:19:17.867 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:19:17.946 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:19:17.858 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:19:17.922 00:00:00.021 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:15:13.522 00:05:51.629 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-28 19:17:05.643 00:05:07.920 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-28 19:17:13.543 00:05:51.589 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-28 19:18:13.583 00:05:51.951 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-28 19:24:18.071 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:24:17.984 00:00:00.024 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:24:17.899 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:20:05.550 00:05:07.976 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-28 19:24:17.811 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:24:17.904 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:24:17.812 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:20:17.017 00:05:10.001 OSPF 24.0.7.1:0 -> 224.0.0.5:0 42 3124 1 2025-11-28 19:21:13.523 00:05:51.629 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-28 19:23:05.645 00:05:07.922 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-28 19:23:13.544 00:05:51.589 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-28 19:24:13.587 00:05:51.948 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-28 19:29:18.255 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:29:17.968 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:29:18.084 00:00:00.024 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:29:18.134 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:29:18.132 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:29:18.050 00:00:00.043 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:25:37.018 00:05:10.045 OSPF 24.0.7.1:0 -> 224.0.0.5:0 39 2828 1 2025-11-28 19:26:05.554 00:05:07.973 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-28 19:27:13.526 00:05:51.626 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-28 19:29:05.647 00:05:07.922 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-28 19:29:13.546 00:05:51.587 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-28 19:34:18.221 00:00:00.028 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:34:18.046 00:00:00.043 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:34:18.050 00:00:00.028 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:34:18.227 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:34:18.231 00:00:00.021 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:34:18.357 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:30:57.063 00:05:10.015 OSPF 24.0.7.1:0 -> 224.0.0.5:0 40 2832 1 2025-11-28 19:30:13.588 00:05:51.948 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-28 19:32:05.555 00:05:07.974 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-28 19:33:13.528 00:05:51.632 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-28 19:35:05.649 00:05:07.922 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-28 19:39:18.227 00:00:00.037 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:39:18.100 00:00:00.024 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:39:18.056 00:00:00.037 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:39:18.325 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:39:18.096 00:00:00.021 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:39:18.331 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:35:13.549 00:05:51.588 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-28 19:36:17.077 00:05:10.011 OSPF 24.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-28 19:36:13.588 00:05:51.951 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-28 19:38:05.557 00:05:07.975 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-28 19:39:13.529 00:05:51.630 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-28 19:44:18.641 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:44:18.473 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:44:18.422 00:00:00.021 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:44:18.330 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:44:18.330 00:00:00.021 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:44:18.470 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:41:05.649 00:05:07.924 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-28 19:41:37.089 00:05:10.005 OSPF 24.0.7.1:0 -> 224.0.0.5:0 37 2612 1 2025-11-28 19:41:13.549 00:05:51.589 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-28 19:42:13.591 00:05:51.948 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-28 19:44:05.561 00:05:07.973 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-28 19:49:18.593 00:00:00.021 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:49:18.423 00:00:00.021 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:49:18.644 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:49:18.422 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:49:18.427 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:49:18.427 00:00:00.021 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:45:13.531 00:05:51.628 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-28 19:46:57.094 00:05:10.005 OSPF 24.0.7.1:0 -> 224.0.0.5:0 39 2860 1 2025-11-28 19:47:05.650 00:05:07.923 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-28 19:47:13.552 00:05:51.587 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-28 19:48:13.592 00:05:51.949 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-28 19:54:18.685 00:00:00.024 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 19:54:18.709 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-28 19:54:18.665 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-28 19:54:18.515 00:00:00.024 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-28 19:50:05.560 00:05:07.973 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-28 19:54:18.665 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-28 19:54:18.509 00:00:00.021 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-28 19:51:13.533 00:05:51.628 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-28 19:52:17.099 00:05:10.005 OSPF 24.0.7.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-28 19:53:05.653 00:05:07.922 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-28 19:53:13.553 00:05:51.590 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 Summary: total flows: 133, total bytes: 84876, total packets: 1235, avg bps: 174, avg pps: 0, avg bpp: 68 Time window: 2025-11-28 18:54:13 - 2025-11-28 19:59:05 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0047s User: 0.0019s Wall: 0.0030s flows/second: 44084.3 Runtime: 0.0030s