Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 13:55:27.374 00:05:01.918 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 13:55:29.292 00:05:02.817 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 13:56:28.226 00:05:01.067 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 13:56:29.291 00:05:04.806 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 13:58:27.354 00:05:02.019 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 13:58:28.207 00:05:01.106 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 13:58:16.489 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-09-13 14:02:34.842 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:58:29.372 00:05:02.719 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 14:02:34.647 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:02:34.803 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:02:34.567 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:02:35.014 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:02:35.012 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 13:59:27.335 00:05:01.958 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 13:59:29.332 00:05:04.745 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 14:01:27.374 00:05:01.923 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 14:01:29.292 00:05:02.817 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 14:02:28.228 00:05:01.067 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 14:02:29.293 00:05:04.806 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 14:07:34.783 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:07:34.713 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:07:34.925 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:07:34.913 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:07:34.918 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:07:34.865 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:03:36.495 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2376 1 2025-09-13 14:04:27.355 00:05:02.021 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 14:04:28.208 00:05:01.108 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 14:04:29.373 00:05:02.725 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 14:05:27.337 00:05:01.959 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 14:05:29.334 00:05:04.747 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 14:07:27.376 00:05:01.921 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 14:07:29.294 00:05:02.818 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 14:08:28.229 00:05:01.067 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 14:08:29.295 00:05:04.807 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 14:12:35.340 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:12:35.178 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:12:35.391 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:12:35.548 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:12:35.360 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:12:35.423 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:08:56.497 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2504 1 2025-09-13 14:10:27.355 00:05:02.022 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 14:10:28.208 00:05:01.109 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 14:10:29.377 00:05:02.719 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 14:11:27.339 00:05:01.960 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 14:11:29.336 00:05:04.746 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 14:13:27.378 00:05:01.921 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 14:17:34.972 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:13:29.296 00:05:02.822 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 14:17:34.970 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:17:35.181 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:17:35.116 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:17:34.983 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:17:35.053 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:14:28.231 00:05:01.067 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 14:14:16.506 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2676 1 2025-09-13 14:14:29.296 00:05:04.807 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 14:16:27.358 00:05:02.027 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 14:16:28.210 00:05:01.109 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 14:16:29.378 00:05:02.720 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 14:17:29.338 00:05:04.746 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 14:17:27.340 00:05:01.960 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 14:22:34.940 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:22:35.059 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:22:35.270 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:22:35.352 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:22:35.105 00:00:00.037 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:22:35.022 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:19:27.380 00:05:01.919 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 14:19:29.299 00:05:02.821 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 14:19:36.511 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2656 1 2025-09-13 14:20:29.300 00:05:04.833 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 14:20:28.233 00:05:01.068 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 14:22:28.212 00:05:01.108 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 14:22:27.361 00:05:02.019 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 14:22:29.379 00:05:02.723 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 14:23:27.341 00:05:01.959 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 14:23:29.339 00:05:04.773 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 14:27:35.273 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:27:35.222 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:27:35.432 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:27:35.194 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:27:35.269 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:27:35.353 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:24:56.517 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-13 14:25:29.300 00:05:02.833 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 14:25:27.383 00:05:01.918 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 14:26:28.233 00:05:01.068 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 14:26:29.299 00:05:04.834 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 14:28:27.362 00:05:02.019 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 14:28:28.213 00:05:01.108 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 14:28:29.380 00:05:02.722 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 14:32:35.586 00:00:00.030 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:32:35.433 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:32:35.219 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:32:35.307 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:32:35.375 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:32:35.227 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:29:27.341 00:05:01.960 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 14:29:29.339 00:05:04.775 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 14:30:16.518 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-09-13 14:31:27.383 00:05:01.919 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 14:31:29.302 00:05:02.821 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 14:32:28.235 00:05:01.068 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 14:32:29.302 00:05:04.835 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 14:37:35.613 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:37:35.640 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:37:35.438 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:37:35.431 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:37:35.351 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:37:35.403 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:34:27.364 00:05:02.019 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 14:34:28.214 00:05:01.108 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 14:34:29.381 00:05:02.722 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 14:35:27.343 00:05:01.960 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 14:35:29.343 00:05:04.775 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 14:35:36.521 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2668 1 2025-09-13 14:37:29.303 00:05:02.822 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 14:37:27.388 00:05:01.916 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 14:38:28.239 00:05:01.064 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 14:38:29.303 00:05:04.835 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 14:42:35.958 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:42:36.028 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:42:35.963 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:42:35.674 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:42:35.592 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:42:35.746 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:40:27.369 00:05:02.015 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 14:40:28.221 00:05:01.102 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 14:40:29.383 00:05:02.722 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 14:40:56.531 00:05:10.031 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2256 1 2025-09-13 14:41:27.343 00:05:01.960 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 14:41:29.343 00:05:04.775 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 14:43:27.390 00:05:01.914 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 14:43:29.303 00:05:02.823 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 14:47:35.621 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:47:35.628 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:47:35.839 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:47:35.840 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:47:35.713 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:47:35.702 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:44:28.240 00:05:01.064 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 14:44:29.304 00:05:04.834 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 14:46:28.222 00:05:01.103 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 14:46:16.539 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 42 3004 1 2025-09-13 14:46:27.370 00:05:02.015 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 14:46:29.383 00:05:02.724 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 14:47:29.344 00:05:04.775 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 14:47:27.346 00:05:01.962 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 14:52:35.966 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:52:35.932 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:52:35.745 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:52:35.804 00:00:00.020 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:52:35.721 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:52:35.755 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 14:49:29.304 00:05:02.824 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 14:49:27.391 00:05:01.917 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 14:50:28.241 00:05:01.067 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 14:50:29.304 00:05:04.836 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 14:51:36.547 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-09-13 14:52:27.372 00:05:02.018 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 14:52:28.223 00:05:01.107 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 14:52:29.388 00:05:02.722 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 14:53:27.346 00:05:01.964 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 14:53:29.349 00:05:04.772 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 14:57:35.947 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:57:36.010 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:57:35.821 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:57:35.816 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 14:57:35.737 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 14:57:35.738 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112288, total packets: 1694, avg bps: 237, avg pps: 0, avg bpp: 66 Time window: 2025-09-13 13:55:27 - 2025-09-13 14:58:34 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0030s User: 0.0020s Wall: 0.0022s flows/second: 80205.0 Runtime: 0.0022s