Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 11:55:30.827 00:05:01.864 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 11:55:32.693 00:05:05.092 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 11:55:32.693 00:05:04.614 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 11:56:31.494 00:05:01.198 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:00:54.518 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:00:54.423 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:00:54.509 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:00:54.599 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:00:54.635 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:00:54.561 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 11:57:32.772 00:05:04.515 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 11:58:00.525 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2708 1 2025-09-20 11:58:30.807 00:05:01.968 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 11:58:31.475 00:05:01.240 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 11:58:32.731 00:05:05.033 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 11:59:30.542 00:05:02.150 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:01:30.831 00:05:01.862 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:01:32.692 00:05:05.093 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:01:32.692 00:05:04.616 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:05:54.730 00:00:00.015 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:05:54.864 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:05:54.534 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:05:54.539 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:05:54.459 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:05:54.513 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:02:31.495 00:05:01.198 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:03:20.530 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 41 2940 1 2025-09-20 12:03:32.775 00:05:04.514 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:04:30.812 00:05:01.963 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:04:31.476 00:05:01.238 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:04:32.733 00:05:05.033 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:05:30.543 00:05:02.151 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:10:54.647 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:10:54.651 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:10:54.861 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:10:54.784 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:10:54.784 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:10:54.728 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:07:30.832 00:05:01.862 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:07:32.693 00:05:05.098 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:07:32.693 00:05:04.616 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:08:31.497 00:05:01.198 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:08:40.536 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2380 1 2025-09-20 12:09:32.774 00:05:04.516 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:10:30.814 00:05:01.966 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:10:31.480 00:05:01.237 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:10:32.734 00:05:05.045 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:11:30.544 00:05:02.151 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:15:54.784 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:15:54.849 00:00:00.026 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:15:54.833 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:15:54.719 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:15:54.639 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:15:54.574 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:13:30.833 00:05:01.863 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:13:32.695 00:05:05.106 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:13:32.695 00:05:04.617 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:14:00.547 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2520 1 2025-09-20 12:14:31.499 00:05:01.199 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:15:32.779 00:05:04.513 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:16:30.814 00:05:01.963 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:16:31.480 00:05:01.237 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:16:32.735 00:05:05.047 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:20:54.863 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:20:54.852 00:00:00.026 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:20:54.773 00:00:00.026 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:20:54.837 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:20:55.047 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:20:54.980 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:17:30.549 00:05:02.149 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:19:20.552 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2304 1 2025-09-20 12:19:30.842 00:05:01.855 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:19:32.698 00:05:05.106 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:19:32.699 00:05:04.614 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:20:31.500 00:05:01.197 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:21:32.776 00:05:04.515 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:25:54.811 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:25:54.811 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:25:54.896 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:25:54.889 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:25:55.019 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:25:55.019 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:22:30.815 00:05:01.963 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:22:31.481 00:05:01.237 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:22:32.736 00:05:05.047 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:23:30.548 00:05:02.149 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:24:40.560 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2692 1 2025-09-20 12:25:30.836 00:05:01.862 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:25:32.696 00:05:05.108 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:25:32.696 00:05:04.616 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:26:31.500 00:05:01.200 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:30:54.962 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:30:54.896 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:30:54.882 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:30:54.685 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:30:55.087 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:30:55.103 00:00:00.041 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:27:32.778 00:05:04.516 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:28:30.817 00:05:01.965 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:28:31.481 00:05:01.240 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:28:32.737 00:05:05.048 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:29:30.550 00:05:02.151 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:30:00.570 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2464 1 2025-09-20 12:31:30.839 00:05:01.863 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:31:32.700 00:05:05.105 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:31:32.700 00:05:04.615 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:35:55.390 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:35:55.286 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:35:54.984 00:00:00.027 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:35:55.268 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:35:55.188 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:35:55.180 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:32:31.503 00:05:01.205 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:33:32.782 00:05:04.515 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:34:31.482 00:05:01.245 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:34:30.819 00:05:01.969 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:34:32.741 00:05:05.045 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:35:30.549 00:05:02.159 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:35:20.575 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2732 1 2025-09-20 12:40:55.158 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:40:55.159 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:40:55.369 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:40:55.213 00:00:00.039 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:40:55.240 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:40:55.238 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:37:30.839 00:05:01.869 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:37:32.707 00:05:05.100 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:37:32.707 00:05:04.610 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:38:31.503 00:05:01.205 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:39:32.787 00:05:04.510 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:40:30.820 00:05:01.969 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:40:31.485 00:05:01.244 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:40:32.748 00:05:05.041 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:40:40.579 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2360 1 2025-09-20 12:41:30.554 00:05:02.156 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:45:55.520 00:00:00.018 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:45:55.459 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:45:55.428 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:45:55.288 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:45:55.209 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:45:55.307 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:43:30.842 00:05:01.868 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:43:32.708 00:05:05.101 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:43:32.708 00:05:04.619 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:44:31.505 00:05:01.204 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:45:32.788 00:05:04.511 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:46:00.588 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2464 1 2025-09-20 12:46:31.486 00:05:01.243 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:46:30.822 00:05:01.968 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:46:32.750 00:05:05.041 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:50:55.623 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:50:55.578 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:50:55.387 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:50:55.300 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:50:55.415 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:50:55.222 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:47:30.554 00:05:02.155 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:49:30.843 00:05:01.867 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:49:32.710 00:05:05.102 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:49:32.710 00:05:04.611 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:50:31.508 00:05:01.202 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:51:20.596 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2368 1 2025-09-20 12:51:32.790 00:05:04.513 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:55:55.720 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:55:55.770 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:55:55.556 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:55:55.393 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:55:55.313 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:55:55.510 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:52:30.824 00:05:01.967 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:52:31.489 00:05:01.242 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:52:32.750 00:05:05.042 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:53:30.554 00:05:02.158 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 Summary: total flows: 173, total bytes: 112496, total packets: 1695, avg bps: 237, avg pps: 0, avg bpp: 66 Time window: 2025-09-20 11:55:30 - 2025-09-20 12:58:32 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0049s User: 0.0010s Wall: 0.0026s flows/second: 65779.6 Runtime: 0.0026s