Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 01:54:13.692 00:05:51.977 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-29 01:59:26.174 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 01:59:25.937 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 01:59:26.003 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 01:59:25.943 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 01:59:26.001 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 01:59:25.942 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 01:56:05.688 00:05:07.945 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-29 01:57:13.632 00:05:51.672 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-29 01:59:05.756 00:05:07.919 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-29 01:59:37.641 00:05:10.006 OSPF 24.0.7.1:0 -> 224.0.0.5:0 39 2860 1 2025-11-29 01:59:13.652 00:05:51.633 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-29 02:04:26.301 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:04:26.045 00:00:00.038 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:04:26.131 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:04:26.131 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:04:26.212 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:04:26.212 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:00:13.693 00:05:51.976 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-29 02:02:05.689 00:05:07.945 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-29 02:03:13.634 00:05:51.673 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-29 02:04:57.648 00:05:10.443 OSPF 24.0.7.1:0 -> 224.0.0.5:0 40 2848 1 2025-11-29 02:05:05.757 00:05:07.920 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-29 02:09:26.416 00:00:00.020 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:09:26.226 00:00:00.021 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:09:26.195 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:09:26.012 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:09:26.205 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:09:26.243 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:05:13.654 00:05:51.633 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-29 02:06:13.694 00:05:51.976 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-29 02:08:05.690 00:05:07.948 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-29 02:09:13.635 00:05:51.673 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-29 02:14:25.987 00:00:00.025 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:14:25.990 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:14:26.227 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:14:26.227 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:14:25.990 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:10:17.654 00:05:10.004 OSPF 24.0.7.1:0 -> 224.0.0.5:0 40 2948 1 2025-11-29 02:14:26.161 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:11:05.757 00:05:07.920 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-29 02:11:13.655 00:05:51.633 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-29 02:12:13.697 00:05:51.977 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-29 02:14:05.693 00:05:07.944 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-29 02:19:26.451 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:19:26.177 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:19:26.280 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:19:26.284 00:00:00.024 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:19:26.361 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:19:26.420 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:15:37.657 00:05:10.008 OSPF 24.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-29 02:15:13.637 00:05:51.672 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-29 02:17:05.759 00:05:07.919 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-29 02:17:13.657 00:05:51.633 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-29 02:18:13.698 00:05:51.979 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-29 02:20:05.694 00:05:07.945 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-29 02:24:26.631 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:24:26.296 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:24:26.459 00:00:00.024 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:24:26.402 00:00:00.021 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:24:26.465 00:00:00.024 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:24:26.185 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:20:57.665 00:05:10.010 OSPF 24.0.7.1:0 -> 224.0.0.5:0 37 2612 1 2025-11-29 02:21:13.637 00:05:51.673 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-29 02:23:05.762 00:05:07.918 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-29 02:23:13.657 00:05:51.633 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-29 02:24:13.698 00:05:51.978 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-29 02:29:26.771 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:29:26.547 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:29:26.601 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:29:26.488 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:29:26.372 00:00:00.021 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:29:26.498 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:26:05.696 00:05:07.944 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-29 02:26:17.675 00:05:10.005 OSPF 24.0.7.1:0 -> 224.0.0.5:0 37 2716 1 2025-11-29 02:27:13.639 00:05:51.675 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-29 02:29:05.766 00:05:07.914 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-29 02:29:13.659 00:05:51.633 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-29 02:34:26.610 00:00:00.024 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:34:26.545 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:34:26.653 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:34:26.536 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:34:26.539 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:34:26.716 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:30:13.700 00:05:51.983 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-29 02:31:37.681 00:05:10.008 OSPF 24.0.7.1:0 -> 224.0.0.5:0 38 2664 1 2025-11-29 02:32:05.701 00:05:07.941 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-29 02:33:13.641 00:05:51.672 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-29 02:35:05.767 00:05:07.915 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-29 02:39:26.644 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:39:26.537 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:39:26.808 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:39:26.641 00:00:00.024 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:39:26.843 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:39:26.707 00:00:00.027 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:35:13.662 00:05:51.632 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-29 02:36:57.690 00:05:10.019 OSPF 24.0.7.1:0 -> 224.0.0.5:0 43 3196 1 2025-11-29 02:36:13.702 00:05:51.983 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-29 02:38:05.704 00:05:07.938 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-29 02:39:13.642 00:05:51.673 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-29 02:44:26.963 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:44:26.923 00:00:00.024 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:44:26.794 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:44:26.791 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:44:26.862 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:44:26.791 00:00:00.024 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:41:05.769 00:05:07.916 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-29 02:41:13.664 00:05:51.632 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-29 02:42:17.696 00:05:10.006 OSPF 24.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-29 02:42:13.704 00:05:51.983 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-29 02:44:05.706 00:05:07.942 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-29 02:49:27.370 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:49:27.034 00:00:00.045 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:49:27.198 00:00:00.024 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:49:27.116 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:49:27.206 00:00:00.024 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:49:27.211 00:00:00.025 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:45:13.643 00:05:51.672 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-29 02:47:05.770 00:05:07.918 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-29 02:47:37.702 00:05:10.005 OSPF 24.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-29 02:47:13.662 00:05:51.633 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-29 02:48:13.707 00:05:51.981 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-29 02:50:05.708 00:05:07.941 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-29 02:54:27.301 00:00:00.024 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 02:54:27.134 00:00:00.021 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-29 02:54:27.130 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-29 02:54:27.134 00:00:00.021 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-29 02:54:27.044 00:00:00.046 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-29 02:54:26.879 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-29 02:51:13.647 00:05:51.669 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-29 02:52:57.707 00:05:10.006 OSPF 24.0.7.1:0 -> 224.0.0.5:0 37 2596 1 2025-11-29 02:53:05.771 00:05:07.919 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-29 02:53:13.668 00:05:51.629 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 Summary: total flows: 133, total bytes: 84684, total packets: 1232, avg bps: 174, avg pps: 0, avg bpp: 68 Time window: 2025-11-29 01:54:13 - 2025-11-29 02:59:05 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0029s User: 0.0029s Wall: 0.0017s flows/second: 79555.4 Runtime: 0.0017s