Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 01:55:30.447 00:05:03.416 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-16 01:55:28.652 00:05:01.795 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-16 01:56:29.391 00:05:01.056 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-16 01:56:30.446 00:05:04.940 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-16 01:57:30.527 00:05:58.107 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-16 01:58:21.634 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2240 1 2025-09-16 01:58:29.372 00:05:01.095 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-16 01:58:30.526 00:05:03.316 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-16 01:59:28.493 00:05:01.954 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-16 01:59:30.489 00:05:04.879 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-16 02:03:46.883 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:03:47.018 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:03:47.013 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:03:47.094 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:03:46.939 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:03:46.802 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:01:30.447 00:05:03.415 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-16 02:01:28.653 00:05:01.795 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-16 02:02:29.395 00:05:01.054 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-16 02:02:30.449 00:05:04.940 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-16 02:03:41.637 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2732 1 2025-09-16 02:03:30.528 00:05:58.110 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-16 02:04:29.377 00:05:01.094 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-16 02:04:30.528 00:05:03.317 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-16 02:08:47.522 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:08:47.030 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:08:47.160 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:08:47.291 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:08:47.080 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:08:47.081 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:05:28.497 00:05:01.954 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-16 02:05:30.488 00:05:04.882 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-16 02:07:30.449 00:05:03.422 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-16 02:07:28.656 00:05:01.795 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-16 02:08:29.398 00:05:01.053 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-16 02:08:30.450 00:05:04.941 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-16 02:09:01.641 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2432 1 2025-09-16 02:13:47.364 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:13:47.435 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:13:47.237 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:13:47.041 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:13:46.960 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:13:47.153 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:09:30.531 00:05:58.108 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-16 02:10:29.378 00:05:01.092 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-16 02:10:30.530 00:05:03.315 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-16 02:11:28.499 00:05:01.952 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-16 02:11:30.492 00:05:04.880 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-16 02:13:30.451 00:05:03.415 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-16 02:13:28.659 00:05:01.792 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-16 02:14:29.398 00:05:01.053 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-16 02:14:21.643 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-09-16 02:14:30.452 00:05:04.940 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-16 02:18:47.245 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:18:47.245 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:18:47.333 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:18:47.327 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:18:47.457 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:18:47.403 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:15:30.531 00:05:58.112 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-16 02:16:29.378 00:05:01.094 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-16 02:16:30.531 00:05:03.315 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-16 02:17:28.502 00:05:01.951 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-16 02:17:30.492 00:05:04.881 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-16 02:19:30.452 00:05:03.416 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-16 02:19:28.664 00:05:01.789 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-16 02:23:47.338 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:23:47.495 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:23:47.755 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:23:47.561 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:23:47.416 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:23:47.545 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:19:41.651 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-09-16 02:20:29.400 00:05:01.052 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-16 02:20:30.453 00:05:04.941 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-16 02:21:30.533 00:05:58.114 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-16 02:22:29.384 00:05:01.090 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-16 02:22:30.533 00:05:03.316 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-16 02:23:28.504 00:05:01.950 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-16 02:23:30.492 00:05:04.882 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-16 02:28:47.432 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:28:47.427 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:28:47.637 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:28:47.693 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:28:47.514 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:28:47.512 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:25:01.654 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2436 1 2025-09-16 02:25:30.452 00:05:03.417 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-16 02:25:28.666 00:05:01.787 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-16 02:26:29.405 00:05:01.049 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-16 02:26:30.454 00:05:04.942 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-16 02:27:30.534 00:05:58.113 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-16 02:28:29.385 00:05:01.090 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-16 02:28:30.534 00:05:03.317 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-16 02:29:28.505 00:05:01.949 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-16 02:29:30.494 00:05:04.882 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-16 02:33:47.797 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:33:47.788 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:33:48.000 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:33:48.000 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:33:47.767 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:33:47.877 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:30:21.666 00:05:10.066 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2520 1 2025-09-16 02:31:30.455 00:05:03.416 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-16 02:31:28.668 00:05:01.789 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-16 02:32:29.407 00:05:01.050 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-16 02:32:30.456 00:05:04.940 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-16 02:33:30.534 00:05:58.114 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-16 02:34:29.386 00:05:01.091 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-16 02:34:30.535 00:05:03.316 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-16 02:38:47.731 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:38:47.677 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:38:47.887 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:38:47.747 00:00:00.017 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:38:47.819 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:38:47.811 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:35:28.507 00:05:01.949 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-16 02:35:30.496 00:05:04.882 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-16 02:35:41.674 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2756 1 2025-09-16 02:37:30.456 00:05:03.415 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-16 02:37:28.668 00:05:01.789 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-16 02:38:29.407 00:05:01.050 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-16 02:38:30.456 00:05:04.942 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-16 02:43:47.990 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:43:47.821 00:00:00.018 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:43:47.792 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:43:47.784 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:43:47.704 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:43:47.780 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:39:30.537 00:05:58.114 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-16 02:40:29.387 00:05:01.090 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-16 02:40:30.536 00:05:03.315 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-16 02:41:01.676 00:05:10.016 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-16 02:41:28.508 00:05:01.951 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-16 02:41:30.498 00:05:04.881 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-16 02:43:30.457 00:05:03.415 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-16 02:43:28.671 00:05:01.787 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-16 02:44:29.411 00:05:01.047 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-16 02:44:30.458 00:05:04.942 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-16 02:48:47.833 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:48:47.837 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:48:47.913 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:48:48.047 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:48:47.970 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:48:47.900 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:45:30.538 00:05:58.115 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-16 02:46:21.693 00:05:10.014 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-09-16 02:46:29.391 00:05:01.088 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-16 02:46:30.543 00:05:03.309 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-16 02:47:28.508 00:05:01.949 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-16 02:47:30.497 00:05:04.884 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-16 02:49:30.459 00:05:03.419 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-16 02:49:28.676 00:05:01.784 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-16 02:53:48.400 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:53:48.390 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:53:48.280 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:53:48.356 00:00:00.032 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:53:48.276 00:00:00.032 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:53:48.190 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-16 02:50:29.411 00:05:01.048 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-16 02:50:30.458 00:05:04.944 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-16 02:51:41.708 00:05:10.014 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2596 1 2025-09-16 02:51:30.540 00:05:58.115 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-16 02:52:29.391 00:05:01.088 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-16 02:52:30.538 00:05:03.315 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-16 02:53:28.510 00:05:01.950 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-16 02:53:30.498 00:05:04.883 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-16 02:58:48.219 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:58:48.075 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:58:48.384 00:00:00.018 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:58:48.336 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-16 02:58:47.995 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 02:58:48.170 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112132, total packets: 1693, avg bps: 236, avg pps: 0, avg bpp: 66 Time window: 2025-09-16 01:55:28 - 2025-09-16 02:58:48 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0034s User: 0.0017s Wall: 0.0023s flows/second: 74027.2 Runtime: 0.0024s