Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 04:54:08.906 00:05:51.781 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-20 04:55:08.926 00:05:51.742 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-20 04:55:08.946 00:05:52.628 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-20 04:55:08.907 00:05:52.439 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-20 05:00:08.107 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:00:07.772 00:00:00.021 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:00:07.773 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:00:07.773 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:00:07.937 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:00:07.938 00:00:00.021 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 04:56:39.668 00:05:10.008 OSPF 24.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 04:57:08.966 00:05:52.359 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-20 05:00:08.907 00:05:51.781 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-20 05:05:08.072 00:00:00.027 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:05:07.948 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:05:07.951 00:00:00.021 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:05:08.005 00:00:00.021 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:05:07.959 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:05:08.121 00:00:00.021 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:01:08.926 00:05:51.745 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-20 05:01:08.946 00:05:52.628 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-20 05:01:08.906 00:05:52.441 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-20 05:01:59.674 00:05:10.004 OSPF 24.0.7.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-20 05:03:08.967 00:05:52.362 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-20 05:10:08.037 00:00:00.032 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:10:07.952 00:00:00.023 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:10:08.129 00:00:00.024 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:10:08.130 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:10:08.130 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:10:08.299 00:00:00.024 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:06:08.907 00:05:51.785 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-20 05:07:19.678 00:05:10.008 OSPF 24.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-11-20 05:07:08.908 00:05:52.442 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-20 05:07:08.928 00:05:51.746 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-20 05:07:08.948 00:05:52.629 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-20 05:09:08.968 00:05:52.364 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-20 05:15:08.393 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:15:08.227 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:15:08.225 00:00:00.021 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:15:08.224 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:15:08.228 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:15:08.274 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:12:39.687 00:05:10.005 OSPF 24.0.7.2:0 -> 224.0.0.5:0 38 2692 1 2025-11-20 05:12:08.910 00:05:51.784 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-20 05:13:08.930 00:05:51.745 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-20 05:13:08.950 00:05:52.627 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-20 05:13:08.909 00:05:52.442 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-20 05:15:08.971 00:05:52.361 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-20 05:20:08.660 00:00:00.020 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:20:08.529 00:00:00.024 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:20:08.437 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:20:08.529 00:00:00.024 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:20:08.532 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:20:08.608 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:17:59.693 00:05:00.693 OSPF 24.0.7.2:0 -> 224.0.0.5:0 36 2648 1 2025-11-20 05:18:08.911 00:05:51.786 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-20 05:19:08.931 00:05:51.749 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-20 05:19:08.952 00:05:52.627 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-20 05:19:08.911 00:05:52.441 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-20 05:25:08.698 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:25:08.425 00:00:00.024 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:25:08.422 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:25:08.528 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:25:08.528 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:25:08.238 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:21:08.971 00:05:52.361 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-20 05:23:09.695 00:05:10.006 OSPF 24.0.7.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-20 05:24:08.913 00:05:51.789 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-20 05:25:08.932 00:05:51.749 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-20 05:25:08.952 00:05:52.627 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-20 05:25:08.914 00:05:52.441 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-20 05:30:08.582 00:00:00.021 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:30:08.469 00:00:00.026 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:30:08.571 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:30:08.657 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:30:08.654 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:30:08.742 00:00:00.022 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:27:08.974 00:05:52.360 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-20 05:28:29.705 00:05:10.010 OSPF 24.0.7.2:0 -> 224.0.0.5:0 32 2176 1 2025-11-20 05:35:08.664 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:30:08.914 00:05:51.788 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-20 05:35:09.211 00:00:00.023 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:35:08.485 00:00:00.025 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:35:08.493 00:00:00.024 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:35:08.474 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:35:08.464 00:00:00.024 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:31:08.935 00:05:51.748 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-20 05:31:08.955 00:05:52.627 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-20 05:31:08.914 00:05:52.440 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-20 05:33:49.716 00:05:10.001 OSPF 24.0.7.2:0 -> 224.0.0.5:0 37 2600 1 2025-11-20 05:33:08.976 00:05:52.359 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-20 05:40:08.964 00:00:00.021 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:40:08.828 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:40:08.714 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:40:08.793 00:00:00.022 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:40:08.829 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:40:08.717 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:36:08.915 00:05:51.789 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-20 05:37:08.936 00:05:51.749 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-20 05:37:08.956 00:05:52.636 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-20 05:37:08.915 00:05:52.441 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-20 05:39:09.718 00:05:10.002 OSPF 24.0.7.2:0 -> 224.0.0.5:0 40 2816 1 2025-11-20 05:39:08.976 00:05:52.359 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-20 05:45:08.883 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:45:08.877 00:00:00.021 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:45:08.703 00:00:00.021 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:45:08.712 00:00:00.024 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:45:08.716 00:00:00.022 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:45:08.874 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:42:08.917 00:05:51.792 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-20 05:43:08.938 00:05:51.752 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-20 05:43:08.958 00:05:52.636 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-20 05:43:08.917 00:05:52.441 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-20 05:44:29.719 00:05:10.015 OSPF 24.0.7.2:0 -> 224.0.0.5:0 35 2448 1 2025-11-20 05:45:08.978 00:05:52.359 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 2025-11-20 05:50:09.006 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:50:08.894 00:00:00.022 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:50:08.999 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:50:09.137 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:50:09.200 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:50:09.170 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:48:08.918 00:05:51.789 TCP 24.155.0.1:36057 -> 24.152.0.1:179 12 738 1 2025-11-20 05:49:49.735 00:05:10.005 OSPF 24.0.7.2:0 -> 224.0.0.5:0 39 2796 1 2025-11-20 05:49:08.938 00:05:51.749 TCP 24.152.0.1:179 -> 24.155.0.1:36057 12 738 1 2025-11-20 05:49:08.959 00:05:52.636 TCP 24.154.0.1:179 -> 24.155.0.1:34993 12 738 1 2025-11-20 05:49:08.917 00:05:52.440 TCP 24.155.0.1:179 -> 24.156.0.1:40789 12 738 1 2025-11-20 05:55:09.342 00:00:00.023 ICMP 25.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 05:55:09.219 00:00:00.022 ICMP 21.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:55:09.179 00:00:00.021 ICMP 21.0.198.2:0 -> 29.107.0.1:8.0 3 252 1 2025-11-20 05:55:09.172 00:00:00.023 ICMP 21.0.198.2:0 -> 25.107.0.1:8.0 3 252 1 2025-11-20 05:55:09.171 00:00:00.023 ICMP 21.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 05:55:09.110 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 05:51:08.979 00:05:52.359 TCP 24.156.0.1:40789 -> 24.155.0.1:179 12 738 1 Summary: total flows: 133, total bytes: 82940, total packets: 1214, avg bps: 175, avg pps: 0, avg bpp: 68 Time window: 2025-11-20 04:54:08 - 2025-11-20 05:57:01 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0041s User: 0.0010s Wall: 0.0017s flows/second: 80461.9 Runtime: 0.0017s