Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 09:55:28.254 00:05:01.896 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-15 09:55:30.150 00:05:03.330 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-15 09:56:29.109 00:05:01.041 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-15 09:56:30.150 00:05:04.878 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-15 09:57:30.231 00:05:58.004 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-15 09:58:29.089 00:05:01.081 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-15 09:58:30.230 00:05:03.221 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-15 10:03:27.837 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:03:27.835 00:00:00.008 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:03:27.716 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:03:27.704 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:03:27.624 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:03:27.627 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 09:59:28.218 00:05:01.933 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-15 09:59:30.191 00:05:04.819 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-15 09:59:40.236 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2448 1 2025-09-15 10:01:30.151 00:05:03.321 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-15 10:01:28.257 00:05:01.895 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-15 10:02:29.110 00:05:01.041 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-15 10:02:30.151 00:05:04.878 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-15 10:03:30.231 00:05:58.006 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-15 10:08:28.009 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:08:28.054 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:08:27.803 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:08:27.800 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:08:27.719 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:08:27.797 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 10:04:29.092 00:05:01.079 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-15 10:04:30.231 00:05:03.222 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-15 10:05:00.247 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2608 1 2025-09-15 10:05:28.219 00:05:01.933 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-15 10:05:30.191 00:05:04.820 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-15 10:07:30.152 00:05:03.321 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-15 10:07:28.256 00:05:01.896 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-15 10:08:29.113 00:05:01.038 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-15 10:08:30.152 00:05:04.879 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-15 10:13:27.859 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:13:27.945 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:13:27.827 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:13:27.729 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:13:27.649 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:13:27.649 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 10:10:20.253 00:05:10.013 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2516 1 2025-09-15 10:09:30.234 00:05:58.007 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-15 10:10:29.096 00:05:01.079 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-15 10:10:30.234 00:05:03.221 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-15 10:11:28.221 00:05:01.933 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-15 10:11:30.192 00:05:04.820 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-15 10:13:30.153 00:05:03.322 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-15 10:13:28.259 00:05:01.896 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-15 10:18:28.238 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:18:28.170 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 10:18:28.381 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:18:28.444 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:18:28.089 00:00:00.040 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:18:28.319 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:14:29.116 00:05:01.038 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-15 10:14:30.152 00:05:04.880 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-15 10:15:40.266 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2524 1 2025-09-15 10:15:30.234 00:05:58.006 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-15 10:16:29.096 00:05:01.081 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-15 10:16:30.234 00:05:03.223 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-15 10:17:28.221 00:05:01.935 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-15 10:17:30.193 00:05:04.820 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-15 10:23:28.081 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:23:28.010 00:00:00.053 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 10:23:28.220 00:00:00.053 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:23:28.056 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:23:28.214 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:23:28.161 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:19:30.154 00:05:03.324 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-15 10:19:28.261 00:05:01.899 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-15 10:20:29.117 00:05:01.042 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-15 10:20:30.156 00:05:04.877 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-15 10:21:00.274 00:05:10.332 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2780 1 2025-09-15 10:21:30.236 00:05:58.006 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-15 10:22:29.098 00:05:01.081 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-15 10:22:30.237 00:05:03.224 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-15 10:23:28.223 00:05:01.936 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-15 10:23:30.197 00:05:04.818 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-15 10:28:28.292 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:28:28.359 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:28:28.343 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:28:28.164 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:28:28.083 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 10:28:28.085 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:25:30.159 00:05:03.322 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-15 10:25:28.263 00:05:01.898 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-15 10:26:29.117 00:05:01.042 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-15 10:26:20.284 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2304 1 2025-09-15 10:26:30.159 00:05:04.875 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-15 10:27:30.238 00:05:58.006 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-15 10:28:29.099 00:05:01.082 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-15 10:28:30.240 00:05:03.222 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-15 10:33:28.216 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 10:33:28.099 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:33:28.426 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:33:28.575 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:33:28.306 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:33:28.180 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:29:28.225 00:05:01.940 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-15 10:29:30.201 00:05:04.815 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-15 10:31:30.159 00:05:03.322 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-15 10:31:28.263 00:05:01.897 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-15 10:31:40.294 00:05:10.447 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2672 1 2025-09-15 10:32:29.119 00:05:01.042 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-15 10:32:30.159 00:05:04.879 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-15 10:33:30.240 00:05:58.009 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-15 10:38:28.954 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:38:29.049 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:38:28.768 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:38:28.756 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:38:28.676 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:38:28.744 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 10:34:29.099 00:05:01.082 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-15 10:34:30.245 00:05:03.217 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-15 10:35:28.225 00:05:01.936 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-15 10:35:30.200 00:05:04.821 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-15 10:37:00.324 00:05:10.511 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2532 1 2025-09-15 10:37:30.160 00:05:03.324 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-15 10:37:28.268 00:05:01.893 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-15 10:38:29.119 00:05:01.042 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-15 10:38:30.161 00:05:04.883 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-15 10:43:28.436 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:43:28.409 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 10:43:28.620 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:43:28.773 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:43:28.401 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:43:28.517 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:39:30.240 00:05:58.011 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-15 10:40:29.100 00:05:01.082 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-15 10:40:30.241 00:05:03.224 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-15 10:41:28.228 00:05:01.934 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-15 10:41:30.200 00:05:04.823 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-15 10:42:20.330 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2304 1 2025-09-15 10:43:30.160 00:05:03.326 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-15 10:43:28.270 00:05:01.891 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-15 10:48:28.861 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:48:28.828 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:48:28.450 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:48:28.592 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:48:28.653 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 10:48:28.514 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:44:29.120 00:05:01.041 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-15 10:44:30.162 00:05:04.884 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-15 10:45:30.242 00:05:58.012 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-15 10:46:29.101 00:05:01.081 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-15 10:46:30.242 00:05:03.225 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-15 10:47:28.229 00:05:01.933 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-15 10:47:30.201 00:05:04.825 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-15 10:47:40.339 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-09-15 10:53:28.957 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:53:28.950 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-15 10:53:29.160 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:53:28.909 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:53:29.080 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:53:29.038 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:49:28.272 00:05:01.892 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-15 10:49:30.162 00:05:03.326 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-15 10:50:29.123 00:05:01.040 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-15 10:50:30.163 00:05:04.917 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-15 10:51:30.244 00:05:58.015 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-15 10:52:29.105 00:05:01.080 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-15 10:52:30.244 00:05:03.225 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-15 10:53:00.343 00:05:00.753 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2664 1 2025-09-15 10:53:28.230 00:05:01.934 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-15 10:53:30.204 00:05:04.858 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-15 10:58:28.907 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:58:28.917 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:58:28.877 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:58:28.796 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-15 10:58:28.717 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 10:58:28.697 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112396, total packets: 1695, avg bps: 237, avg pps: 0, avg bpp: 66 Time window: 2025-09-15 09:55:28 - 2025-09-15 10:58:35 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0036s User: 0.0012s Wall: 0.0019s flows/second: 91780.2 Runtime: 0.0019s