Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 00:54:47.047 00:05:07.159 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 00:55:45.195 00:05:01.773 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 01:00:07.720 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:00:07.609 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:00:07.820 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:00:07.923 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:00:07.802 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:00:07.801 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 00:55:53.926 00:05:53.082 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 00:56:45.249 00:05:01.718 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 00:57:45.175 00:05:01.873 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 00:57:46.966 00:05:06.981 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 00:57:59.124 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2416 1 2025-10-20 00:58:44.243 00:05:02.724 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 00:58:45.229 00:05:01.758 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 00:59:54.227 00:05:52.742 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 01:00:47.047 00:05:07.160 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 01:05:08.783 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:05:08.837 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:05:08.656 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:05:08.788 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:05:08.577 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:05:08.579 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:01:45.197 00:05:01.772 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 01:02:45.249 00:05:01.718 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 01:01:53.927 00:05:53.083 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 01:03:19.130 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2472 1 2025-10-20 01:03:45.175 00:05:01.873 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 01:03:46.967 00:05:06.981 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 01:04:44.245 00:05:02.724 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 01:04:45.231 00:05:01.758 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 01:10:07.599 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:10:07.847 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:10:08.059 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:10:07.884 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:10:07.967 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:10:07.681 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:05:54.228 00:05:52.740 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 01:06:47.048 00:05:07.160 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 01:07:45.195 00:05:01.773 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 01:08:45.257 00:05:01.713 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 01:08:39.135 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-20 01:07:53.929 00:05:53.082 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 01:09:45.176 00:05:01.874 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 01:09:46.968 00:05:06.984 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 01:10:44.245 00:05:02.725 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 01:10:45.235 00:05:01.755 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 01:15:08.078 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:15:07.988 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:15:07.954 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:15:07.993 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:15:07.913 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:15:07.869 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:11:54.229 00:05:52.741 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 01:12:47.050 00:05:07.163 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 01:13:45.197 00:05:01.773 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 01:13:59.140 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2896 1 2025-10-20 01:14:45.258 00:05:01.713 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 01:13:53.929 00:05:53.084 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 01:15:45.178 00:05:01.873 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 01:15:46.971 00:05:06.987 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 01:20:08.206 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:20:08.200 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:20:08.077 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:20:08.182 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:20:08.102 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:20:07.996 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:16:44.246 00:05:02.724 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 01:16:45.239 00:05:01.752 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 01:17:54.232 00:05:52.739 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 01:18:47.052 00:05:07.164 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 01:19:19.145 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-10-20 01:19:45.200 00:05:01.772 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 01:19:53.938 00:05:53.075 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 01:20:45.259 00:05:01.713 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 01:25:08.129 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:25:08.094 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:25:08.304 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:25:08.296 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:25:08.177 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:25:08.209 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:21:45.181 00:05:01.873 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 01:21:46.971 00:05:06.989 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 01:22:44.247 00:05:02.727 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 01:22:45.239 00:05:01.754 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 01:23:54.235 00:05:52.739 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 01:24:39.152 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2596 1 2025-10-20 01:24:47.051 00:05:07.164 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 01:25:45.201 00:05:01.775 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 01:30:08.007 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:30:08.300 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:30:08.512 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:30:08.607 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:30:08.387 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:30:08.089 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:26:45.263 00:05:01.713 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 01:25:53.940 00:05:53.077 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 01:27:45.181 00:05:01.875 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 01:27:46.973 00:05:06.987 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 01:28:44.247 00:05:02.729 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 01:28:45.242 00:05:01.754 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 01:29:59.158 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-20 01:29:54.237 00:05:52.742 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 01:30:47.056 00:05:07.162 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 01:35:08.343 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:35:08.463 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:35:08.674 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:35:08.549 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:35:08.426 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:35:08.424 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:31:45.202 00:05:01.777 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 01:32:45.263 00:05:01.716 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 01:31:53.942 00:05:53.079 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 01:33:45.185 00:05:01.876 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 01:33:46.976 00:05:06.986 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 01:34:45.251 00:05:01.749 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 01:34:44.250 00:05:02.729 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 01:35:19.165 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-20 01:40:08.170 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:40:08.241 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:40:08.327 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:40:08.252 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:40:08.453 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:40:08.521 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:35:54.238 00:05:52.742 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 01:36:47.068 00:05:07.151 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 01:37:45.213 00:05:01.768 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 01:38:45.274 00:05:01.706 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 01:37:53.942 00:05:53.080 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 01:39:45.198 00:05:01.862 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 01:39:46.980 00:05:06.983 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 01:40:39.166 00:05:00.919 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2496 1 2025-10-20 01:40:45.255 00:05:01.748 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 01:40:44.252 00:05:02.729 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 01:45:08.652 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:45:08.643 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:45:08.378 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:45:08.371 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:45:08.440 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:45:08.290 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:41:54.239 00:05:52.743 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 01:42:47.061 00:05:07.159 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 01:43:45.213 00:05:01.769 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 01:44:45.276 00:05:01.708 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 01:43:53.942 00:05:53.083 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 01:45:45.194 00:05:01.871 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 01:45:46.982 00:05:06.986 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 01:45:49.172 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2512 1 2025-10-20 01:50:08.601 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:50:08.536 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:50:08.745 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:50:08.840 00:00:00.012 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:50:08.779 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:50:08.680 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:46:45.256 00:05:01.749 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 01:46:44.253 00:05:02.730 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 01:47:54.239 00:05:52.744 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 01:48:47.063 00:05:07.158 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 01:49:45.214 00:05:01.770 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 01:49:53.947 00:05:53.078 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 01:50:45.277 00:05:01.708 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 01:55:08.831 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:55:08.826 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:55:08.782 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:55:09.033 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 01:55:08.744 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:55:08.570 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:51:09.181 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2644 1 2025-10-20 01:51:45.197 00:05:01.871 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 01:51:46.984 00:05:06.985 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 01:52:45.258 00:05:01.749 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 01:52:44.256 00:05:02.731 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 01:53:54.241 00:05:52.746 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 Summary: total flows: 173, total bytes: 112300, total packets: 1693, avg bps: 230, avg pps: 0, avg bpp: 66 Time window: 2025-10-20 00:54:47 - 2025-10-20 01:59:46 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0029s User: 0.0029s Wall: 0.0026s flows/second: 65905.0 Runtime: 0.0026s