Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 01:54:52.177 00:05:52.911 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 01:55:43.135 00:05:01.953 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 01:55:45.169 00:05:06.990 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 01:56:43.403 00:05:01.684 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 01:57:45.168 00:05:57.949 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 01:58:43.384 00:05:01.724 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 01:57:51.900 00:05:53.228 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 02:03:13.676 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.495 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.397 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.380 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:03:13.300 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:03:13.465 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 01:59:11.140 00:05:10.020 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2628 1 2025-10-16 01:58:51.920 00:05:53.168 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 01:59:42.391 00:05:02.697 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 02:00:52.177 00:05:52.911 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 02:01:43.137 00:05:01.951 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 02:01:45.168 00:05:06.991 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 02:02:43.404 00:05:01.684 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 02:08:14.209 00:00:00.036 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:08:13.957 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:08:13.835 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:08:13.838 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:08:13.759 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:08:14.001 00:00:00.029 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 02:03:45.168 00:05:57.951 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 02:04:31.147 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2580 1 2025-10-16 02:04:43.385 00:05:01.724 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 02:03:51.904 00:05:53.225 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 02:04:51.923 00:05:53.165 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 02:05:42.393 00:05:02.695 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 02:06:52.180 00:05:52.910 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 02:07:43.139 00:05:01.951 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 02:07:45.169 00:05:06.991 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 02:08:43.407 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 02:13:13.850 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.539 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.613 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.943 00:00:00.017 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.533 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:13:13.728 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 02:09:51.150 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2564 1 2025-10-16 02:09:45.168 00:05:57.952 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 02:10:43.386 00:05:01.723 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 02:09:51.906 00:05:53.223 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 02:10:51.926 00:05:53.164 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 02:11:42.394 00:05:02.696 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 02:12:52.179 00:05:52.910 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 02:13:43.139 00:05:01.950 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 02:13:45.170 00:05:06.992 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 02:18:14.145 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.862 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.764 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.985 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.684 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:18:13.775 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 02:14:43.407 00:05:01.684 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 02:15:11.158 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2408 1 2025-10-16 02:15:45.170 00:05:57.952 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 02:15:51.908 00:05:53.224 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 02:16:43.387 00:05:01.725 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 02:16:51.928 00:05:53.164 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 02:17:42.395 00:05:02.697 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 02:23:13.870 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.861 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.945 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.886 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:23:13.806 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:23:13.660 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 02:18:52.182 00:05:52.911 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 02:19:43.142 00:05:01.951 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 02:19:45.173 00:05:06.990 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 02:20:31.167 00:05:10.445 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-16 02:20:43.408 00:05:01.685 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 02:21:45.172 00:05:57.953 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 02:22:43.389 00:05:01.725 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 02:21:51.910 00:05:53.224 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 02:23:42.397 00:05:02.696 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 02:22:51.929 00:05:53.164 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 02:28:14.116 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:28:14.111 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 02:28:14.323 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:28:14.461 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:28:14.197 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:28:14.197 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:24:52.183 00:05:52.911 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 02:25:43.145 00:05:01.949 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 02:25:45.173 00:05:06.991 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 02:25:51.182 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2796 1 2025-10-16 02:26:43.408 00:05:01.687 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 02:27:45.173 00:05:57.952 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 02:28:43.389 00:05:01.725 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 02:27:51.917 00:05:53.217 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 02:33:13.943 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:33:13.860 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 02:33:14.072 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:33:14.067 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:33:14.032 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:33:14.026 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:28:51.939 00:05:53.155 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 02:29:42.397 00:05:02.696 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 02:31:11.188 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2536 1 2025-10-16 02:30:52.184 00:05:52.911 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 02:31:43.145 00:05:01.950 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 02:31:45.175 00:05:06.990 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 02:32:43.410 00:05:01.685 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 02:38:13.807 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:38:14.009 00:00:00.030 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 02:38:14.216 00:00:00.031 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:38:14.370 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:38:14.252 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:38:13.886 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:33:45.176 00:05:57.952 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 02:34:43.398 00:05:01.716 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 02:33:51.919 00:05:53.215 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 02:34:51.940 00:05:53.155 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 02:35:42.398 00:05:02.697 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 02:36:31.192 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2580 1 2025-10-16 02:36:52.186 00:05:52.909 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 02:37:43.146 00:05:01.949 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 02:37:45.175 00:05:06.992 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 02:38:43.413 00:05:01.682 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 02:43:14.069 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:43:14.081 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 02:43:14.029 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.150 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.292 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.354 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:39:45.175 00:05:57.951 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 02:40:43.395 00:05:01.721 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 02:39:51.922 00:05:53.214 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 02:40:51.943 00:05:53.155 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 02:41:42.401 00:05:02.696 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 02:41:51.203 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-16 02:42:52.186 00:05:52.910 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 02:43:43.146 00:05:01.950 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 02:43:45.176 00:05:06.991 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 02:48:14.543 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.478 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.188 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.492 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:48:14.413 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:48:14.334 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 02:44:43.414 00:05:01.682 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 02:45:45.176 00:05:57.952 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 02:46:43.394 00:05:01.723 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 02:45:51.922 00:05:53.215 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 02:47:11.210 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2376 1 2025-10-16 02:46:51.942 00:05:53.157 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 02:47:42.400 00:05:02.699 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 02:53:14.578 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.457 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.452 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.590 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:53:14.372 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:53:14.380 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 02:48:52.188 00:05:52.911 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 02:49:43.149 00:05:01.950 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 02:49:45.178 00:05:06.991 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 02:50:43.415 00:05:01.685 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 02:51:45.177 00:05:57.953 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 02:52:31.221 00:05:10.785 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2496 1 2025-10-16 02:52:43.396 00:05:01.725 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 02:51:51.926 00:05:53.215 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 02:52:51.945 00:05:53.155 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 02:53:42.401 00:05:02.699 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 02:58:14.758 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.630 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.317 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.447 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 02:58:14.237 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 02:58:14.237 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112368, total packets: 1693, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-10-16 01:54:52 - 2025-10-16 02:58:45 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0035s User: 0.0026s Wall: 0.0026s flows/second: 66363.1 Runtime: 0.0026s