Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 12:55:27.354 00:05:01.925 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 12:55:29.276 00:05:02.776 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 12:56:29.275 00:05:04.761 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 12:56:28.207 00:05:01.072 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 12:58:27.337 00:05:02.024 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:58:28.189 00:05:01.111 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:02:33.646 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:02:33.625 00:00:00.026 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:02:33.606 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:58:29.360 00:05:02.673 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 13:02:33.506 00:00:00.031 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:02:33.425 00:00:00.031 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:02:33.435 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:59:27.315 00:05:01.965 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:59:29.319 00:05:04.699 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 12:59:46.430 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-09-13 13:01:29.279 00:05:02.775 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 13:01:27.358 00:05:01.922 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 13:02:28.209 00:05:01.072 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 13:02:29.280 00:05:04.759 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 13:07:33.857 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:07:33.762 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:07:33.637 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:07:33.631 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:07:33.551 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:07:33.647 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:04:27.338 00:05:02.022 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 13:04:28.188 00:05:01.112 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:04:29.360 00:05:02.676 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 13:05:06.434 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-13 13:05:27.318 00:05:01.962 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 13:05:29.321 00:05:04.701 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 13:07:27.359 00:05:01.921 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 13:07:29.280 00:05:02.777 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 13:08:28.210 00:05:01.075 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 13:12:33.673 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:08:29.280 00:05:04.761 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 13:12:33.600 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:12:33.885 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:12:33.877 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:12:33.790 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:12:33.681 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:10:28.189 00:05:01.112 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:10:27.340 00:05:02.023 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 13:10:29.362 00:05:02.677 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 13:10:26.440 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2624 1 2025-09-13 13:11:27.322 00:05:01.961 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 13:11:29.323 00:05:04.699 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 13:17:34.029 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:17:34.037 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:17:34.188 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:17:34.056 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:17:33.975 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:13:29.284 00:05:02.774 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 13:13:27.359 00:05:01.922 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 13:17:33.818 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:14:28.215 00:05:01.068 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 13:14:29.280 00:05:04.765 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 13:15:46.445 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-13 13:16:27.341 00:05:02.022 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 13:16:28.197 00:05:01.106 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:16:29.362 00:05:02.678 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 13:17:27.320 00:05:01.962 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 13:17:29.322 00:05:04.703 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 13:22:33.822 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:22:33.881 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:22:34.092 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:22:34.032 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:22:33.910 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:22:33.902 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:19:27.360 00:05:01.922 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 13:19:29.281 00:05:02.778 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 13:20:28.216 00:05:01.066 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 13:20:29.281 00:05:04.766 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 13:21:06.448 00:05:00.941 OSPF 27.0.10.2:0 -> 224.0.0.5:0 41 2880 1 2025-09-13 13:22:27.343 00:05:02.020 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 13:22:28.197 00:05:01.106 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:22:29.362 00:05:02.684 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 13:27:33.851 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:23:27.322 00:05:01.965 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 13:27:33.914 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:27:34.125 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:27:34.160 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:27:34.000 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:23:29.328 00:05:04.698 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 13:27:33.931 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:25:27.364 00:05:01.920 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 13:25:29.283 00:05:02.783 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 13:26:28.218 00:05:01.067 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 13:26:16.449 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2460 1 2025-09-13 13:26:29.283 00:05:04.765 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 13:28:27.345 00:05:02.020 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 13:28:28.197 00:05:01.107 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:32:34.366 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:32:34.428 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:32:34.242 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:28:29.367 00:05:02.681 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 13:32:34.304 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:32:34.223 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:32:34.155 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:29:27.331 00:05:01.954 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 13:29:29.324 00:05:04.708 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 13:31:27.368 00:05:01.919 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 13:31:29.284 00:05:02.785 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 13:31:36.454 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-09-13 13:32:28.220 00:05:01.067 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 13:32:29.284 00:05:04.796 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 13:37:34.243 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:37:34.244 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:37:34.453 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:37:34.244 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:37:34.329 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:37:34.324 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:34:27.349 00:05:02.019 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 13:34:28.200 00:05:01.108 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:34:29.366 00:05:02.682 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 13:35:27.331 00:05:01.957 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 13:35:29.327 00:05:04.734 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 13:36:56.462 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2604 1 2025-09-13 13:37:27.370 00:05:01.919 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 13:37:29.287 00:05:02.782 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 13:38:29.288 00:05:04.797 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 13:42:34.134 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:38:28.222 00:05:01.066 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 13:42:34.208 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:42:34.418 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:42:34.356 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:42:34.348 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:42:34.214 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:40:27.350 00:05:02.018 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 13:40:28.201 00:05:01.107 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:40:29.369 00:05:02.711 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 13:41:27.332 00:05:01.957 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 13:41:29.328 00:05:04.738 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 13:42:16.469 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2304 1 2025-09-13 13:47:34.385 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:43:29.289 00:05:02.814 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 13:43:27.371 00:05:01.919 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 13:47:34.502 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:47:34.711 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:47:34.505 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:47:34.539 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:47:34.464 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:44:28.224 00:05:01.067 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 13:44:29.289 00:05:04.801 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 13:46:28.203 00:05:01.109 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:46:27.353 00:05:02.019 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 13:46:29.370 00:05:02.715 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 13:47:27.333 00:05:01.957 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 13:47:29.330 00:05:04.744 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 13:47:36.475 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 42 2964 1 2025-09-13 13:52:34.630 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:52:34.672 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:52:34.882 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:52:34.777 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:52:34.790 00:00:00.032 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:52:34.709 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:49:27.373 00:05:01.918 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 13:49:29.291 00:05:02.816 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 13:50:29.291 00:05:04.804 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 13:50:28.225 00:05:01.068 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 13:52:27.353 00:05:02.019 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 13:52:28.205 00:05:01.107 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:52:29.371 00:05:02.718 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 13:52:56.486 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2368 1 2025-09-13 13:57:34.533 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 13:53:27.333 00:05:01.958 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 13:57:34.666 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 13:53:29.332 00:05:04.744 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 13:57:34.615 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:57:34.878 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:57:34.791 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:57:34.352 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 Summary: total flows: 173, total bytes: 112208, total packets: 1692, avg bps: 237, avg pps: 0, avg bpp: 66 Time window: 2025-09-13 12:55:27 - 2025-09-13 13:58:34 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0021s User: 0.0031s Wall: 0.0022s flows/second: 78453.3 Runtime: 0.0022s