Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 00:55:32.969 00:05:01.961 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-25 00:55:40.504 00:05:54.508 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-25 00:56:33.541 00:05:01.389 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-25 00:57:34.970 00:05:05.636 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-25 00:58:32.949 00:05:02.063 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-25 00:58:33.522 00:05:01.428 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-25 00:58:29.369 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2304 1 2025-09-25 01:03:05.541 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:03:05.614 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:03:05.740 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:03:05.731 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:03:05.534 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:03:05.530 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 00:59:32.553 00:05:02.377 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-25 01:00:34.930 00:05:05.696 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-25 01:00:34.930 00:05:05.596 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-25 01:01:32.970 00:05:01.961 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-25 01:02:33.543 00:05:01.389 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-25 01:01:40.506 00:05:54.507 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-25 01:03:34.970 00:05:05.637 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-25 01:03:49.375 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2564 1 2025-09-25 01:08:05.716 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:08:05.769 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:08:05.979 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:08:05.867 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:08:05.661 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:08:05.796 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:04:32.952 00:05:02.062 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-25 01:04:33.524 00:05:01.428 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-25 01:05:32.557 00:05:02.374 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-25 01:06:34.931 00:05:05.697 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-25 01:06:34.931 00:05:05.598 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-25 01:07:32.971 00:05:01.962 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-25 01:08:33.543 00:05:01.389 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-25 01:07:40.507 00:05:54.507 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-25 01:13:05.771 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:13:05.492 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:13:05.981 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:13:05.803 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:13:05.912 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:13:05.572 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:09:09.385 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2920 1 2025-09-25 01:09:34.973 00:05:05.638 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-25 01:10:33.526 00:05:01.429 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-25 01:10:32.952 00:05:02.065 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-25 01:11:32.556 00:05:02.380 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-25 01:12:34.933 00:05:05.702 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-25 01:12:34.933 00:05:05.597 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-25 01:13:32.974 00:05:01.962 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-25 01:18:06.148 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:18:05.990 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:18:05.871 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:18:06.013 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:18:05.932 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:18:05.937 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:13:40.508 00:05:54.509 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-25 01:14:33.549 00:05:01.388 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-25 01:14:29.394 00:05:10.018 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2416 1 2025-09-25 01:15:34.975 00:05:05.637 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-25 01:16:32.955 00:05:02.063 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-25 01:16:33.528 00:05:01.430 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-25 01:17:32.555 00:05:02.381 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-25 01:18:34.936 00:05:05.697 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-25 01:18:34.936 00:05:05.596 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-25 01:23:05.884 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:23:05.888 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:23:06.098 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:23:06.196 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:23:05.969 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:23:05.964 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:19:32.975 00:05:01.962 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-25 01:19:49.403 00:05:10.585 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2424 1 2025-09-25 01:19:40.510 00:05:54.509 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-25 01:20:33.547 00:05:01.391 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-25 01:21:34.977 00:05:05.637 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-25 01:22:33.526 00:05:01.432 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-25 01:22:32.954 00:05:02.064 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-25 01:23:32.556 00:05:02.382 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-25 01:28:06.020 00:00:00.036 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:28:06.012 00:00:00.035 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:28:06.221 00:00:00.036 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:28:06.318 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:28:06.232 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:28:06.099 00:00:00.036 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:24:34.937 00:05:05.696 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-25 01:24:34.937 00:05:05.611 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-25 01:25:09.406 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2304 1 2025-09-25 01:25:32.975 00:05:01.964 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-25 01:25:40.513 00:05:54.508 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-25 01:26:33.549 00:05:01.391 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-25 01:27:34.979 00:05:05.635 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-25 01:28:33.531 00:05:01.430 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-25 01:28:32.959 00:05:02.062 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-25 01:33:05.950 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:33:06.131 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:33:06.160 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:33:06.384 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:33:06.157 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:33:06.212 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:29:32.557 00:05:02.383 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-25 01:30:34.939 00:05:05.695 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-25 01:30:34.939 00:05:05.601 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-25 01:30:29.412 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-09-25 01:31:32.978 00:05:01.962 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-25 01:31:40.517 00:05:54.503 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-25 01:32:33.550 00:05:01.390 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-25 01:33:34.979 00:05:05.635 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-25 01:38:06.883 00:00:00.026 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:38:06.756 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:38:06.190 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:38:06.185 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:38:06.105 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:38:06.673 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:34:32.960 00:05:02.064 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-25 01:34:33.531 00:05:01.431 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-25 01:35:32.557 00:05:02.383 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-25 01:35:49.419 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 41 3040 1 2025-09-25 01:36:34.940 00:05:05.696 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-25 01:36:34.940 00:05:05.605 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-25 01:37:32.980 00:05:01.962 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-25 01:37:40.521 00:05:54.502 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-25 01:38:33.550 00:05:01.391 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-25 01:43:06.481 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:43:06.527 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:43:06.410 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:43:06.283 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:43:06.202 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:43:06.270 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:39:34.982 00:05:05.636 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-25 01:40:32.961 00:05:02.064 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-25 01:40:33.531 00:05:01.432 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-25 01:41:09.427 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2416 1 2025-09-25 01:41:32.558 00:05:02.384 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-25 01:42:34.941 00:05:05.696 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-25 01:42:34.941 00:05:05.605 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-25 01:43:32.982 00:05:01.961 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-25 01:48:06.541 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:48:06.498 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:48:06.709 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:48:06.550 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:48:06.627 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:48:06.622 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:44:33.551 00:05:01.392 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-25 01:43:40.526 00:05:54.499 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-25 01:45:34.982 00:05:05.636 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-25 01:46:29.433 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2580 1 2025-09-25 01:46:32.964 00:05:02.061 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-25 01:46:33.531 00:05:01.433 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-25 01:47:32.559 00:05:02.384 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-25 01:48:34.942 00:05:05.696 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-25 01:48:34.942 00:05:05.606 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-25 01:53:06.584 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:53:06.454 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:53:06.665 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:53:06.741 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:53:06.828 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:53:06.666 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:49:32.985 00:05:01.959 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-25 01:50:33.555 00:05:01.390 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-25 01:49:40.527 00:05:54.497 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-25 01:51:34.984 00:05:05.635 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-25 01:51:49.437 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2368 1 2025-09-25 01:52:33.533 00:05:01.430 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-25 01:52:32.965 00:05:02.060 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-25 01:53:32.560 00:05:02.384 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-25 01:58:06.531 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 01:58:06.676 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-25 01:58:06.886 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:58:06.880 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:58:06.800 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:58:06.611 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-25 01:54:34.943 00:05:05.696 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-25 01:54:34.943 00:05:05.611 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 Summary: total flows: 173, total bytes: 112428, total packets: 1694, avg bps: 233, avg pps: 0, avg bpp: 66 Time window: 2025-09-25 00:55:32 - 2025-09-25 01:59:40 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0032s User: 0.0019s Wall: 0.0035s flows/second: 49987.2 Runtime: 0.0035s