Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 01:55:27.149 00:05:01.924 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 01:55:29.071 00:05:02.560 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 01:55:33.779 00:05:55.294 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 01:56:27.941 00:05:01.132 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 02:02:20.074 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:02:20.225 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:02:20.154 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:02:20.436 00:00:00.030 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:02:20.439 00:00:00.027 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:02:20.162 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 01:58:27.130 00:05:02.024 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 01:58:27.922 00:05:01.172 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 01:58:29.153 00:05:02.467 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 01:59:27.128 00:05:01.947 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 01:59:29.113 00:05:04.648 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 01:59:35.554 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2588 1 2025-09-13 02:01:29.073 00:05:02.559 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 02:01:27.150 00:05:01.924 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 02:01:33.780 00:05:55.294 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 02:02:27.944 00:05:01.130 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 02:07:20.609 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:07:20.559 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:07:20.439 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:07:20.376 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:07:20.399 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:07:20.296 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:04:27.131 00:05:02.024 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 02:04:27.925 00:05:01.170 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 02:04:29.155 00:05:02.457 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 02:04:55.565 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-09-13 02:05:27.129 00:05:01.945 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 02:05:29.114 00:05:04.648 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 02:07:27.151 00:05:01.925 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 02:07:29.075 00:05:02.559 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 02:12:20.727 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:12:20.592 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:12:20.538 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:12:20.535 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:12:20.455 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:12:20.517 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:07:33.781 00:05:55.294 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 02:08:27.944 00:05:01.131 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 02:10:27.131 00:05:02.026 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 02:10:27.925 00:05:01.171 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 02:10:15.574 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2488 1 2025-09-13 02:10:29.155 00:05:02.459 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 02:11:27.131 00:05:01.946 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 02:11:29.116 00:05:04.651 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 02:17:20.388 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:17:20.647 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:17:20.858 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:17:20.773 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:17:20.645 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:17:20.470 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:13:27.151 00:05:01.925 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 02:13:29.074 00:05:02.562 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 02:13:33.783 00:05:55.293 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 02:14:27.948 00:05:01.128 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 02:15:35.577 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2500 1 2025-09-13 02:16:27.132 00:05:02.025 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 02:16:27.928 00:05:01.169 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 02:16:29.156 00:05:02.460 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 02:17:27.132 00:05:01.946 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 02:17:29.117 00:05:04.651 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 02:22:20.921 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:22:20.562 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:22:20.773 00:00:00.026 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:22:21.135 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:22:20.928 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:22:21.004 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:19:27.151 00:05:01.926 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 02:19:29.076 00:05:02.563 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 02:19:33.786 00:05:55.292 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 02:20:27.948 00:05:01.130 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 02:20:55.583 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 41 2884 1 2025-09-13 02:22:27.930 00:05:01.170 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 02:22:29.159 00:05:02.460 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 02:22:27.133 00:05:02.027 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 02:27:20.736 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:27:20.788 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:27:21.000 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:27:20.990 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:27:20.910 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:27:20.816 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:23:27.138 00:05:01.941 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 02:23:29.118 00:05:04.652 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 02:25:27.153 00:05:01.926 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 02:25:29.078 00:05:02.566 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 02:26:15.593 00:05:00.594 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2520 1 2025-09-13 02:25:33.789 00:05:55.290 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 02:26:27.949 00:05:01.130 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 02:32:20.866 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:32:20.868 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:32:21.079 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:32:21.128 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:32:20.964 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:32:20.947 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:28:27.134 00:05:02.025 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 02:28:27.929 00:05:01.170 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 02:28:29.159 00:05:02.461 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 02:29:27.139 00:05:01.941 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 02:29:29.120 00:05:04.652 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 02:31:27.156 00:05:01.924 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 02:31:29.079 00:05:02.563 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 02:31:25.596 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-09-13 02:31:33.792 00:05:55.290 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 02:32:27.951 00:05:01.131 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 02:37:20.838 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:37:20.958 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:37:20.998 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:37:21.040 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:37:21.050 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:37:21.206 00:00:00.048 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:34:27.136 00:05:02.025 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 02:34:27.930 00:05:01.171 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 02:34:29.160 00:05:02.462 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 02:35:27.141 00:05:01.939 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 02:35:29.121 00:05:04.653 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 02:36:45.600 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 32 2176 1 2025-09-13 02:37:27.156 00:05:01.925 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 02:37:29.080 00:05:02.567 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 02:42:21.008 00:00:00.032 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:42:21.106 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:42:21.318 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:42:21.318 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:42:21.193 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:42:21.088 00:00:00.033 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:37:33.793 00:06:00.002 TCP 27.156.0.1:34437 -> 27.153.0.1:179 13 790 1 2025-09-13 02:38:27.953 00:05:01.129 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 02:40:27.932 00:05:01.168 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 02:40:27.136 00:05:02.025 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 02:40:29.161 00:05:02.466 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 02:41:27.144 00:05:01.937 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 02:41:29.122 00:05:04.654 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 02:42:05.611 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2732 1 2025-09-13 02:47:21.072 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:47:21.069 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:47:21.279 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:47:21.337 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:47:21.381 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:47:21.152 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:43:29.081 00:05:02.574 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 02:43:27.157 00:05:01.925 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 02:44:27.953 00:05:01.129 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 02:44:29.081 00:05:04.716 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 02:46:27.138 00:05:02.026 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 02:46:27.933 00:05:01.171 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 02:46:29.162 00:05:02.475 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 02:47:27.149 00:05:01.935 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 02:47:29.121 00:05:04.656 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 02:47:25.615 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2612 1 2025-09-13 02:52:21.085 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:52:21.229 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:52:21.440 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:52:21.500 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:52:21.164 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:52:21.166 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:49:27.158 00:05:01.926 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 02:49:29.082 00:05:02.574 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 02:50:27.953 00:05:01.131 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 02:50:29.084 00:05:04.715 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 02:52:27.139 00:05:02.026 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 02:52:27.934 00:05:01.171 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 02:52:29.165 00:05:02.472 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 02:52:45.623 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2592 1 2025-09-13 02:57:21.953 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:57:22.004 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:57:21.684 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:57:21.824 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 02:57:21.744 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 02:57:21.742 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 02:53:27.149 00:05:01.937 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 02:53:29.124 00:05:04.656 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 Summary: total flows: 173, total bytes: 112508, total packets: 1695, avg bps: 237, avg pps: 0, avg bpp: 66 Time window: 2025-09-13 01:55:27 - 2025-09-13 02:58:33 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0045s User: 0.0009s Wall: 0.0023s flows/second: 76582.0 Runtime: 0.0023s