Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 01:54:47.066 00:05:07.158 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 01:55:45.223 00:05:01.764 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 02:00:08.945 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:00:08.884 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:00:08.735 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:00:09.012 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:00:08.655 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:00:08.802 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 01:56:29.192 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-20 01:56:45.280 00:05:01.706 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 01:55:53.950 00:05:53.078 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 01:57:45.197 00:05:01.870 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 01:57:46.986 00:05:06.995 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 01:58:44.259 00:05:02.728 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 01:58:45.262 00:05:01.746 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 01:59:54.244 00:05:52.744 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 02:00:47.068 00:05:07.157 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 02:05:08.771 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:05:08.978 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:05:09.188 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:05:09.057 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:05:09.020 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:05:08.851 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:01:45.217 00:05:01.770 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 02:01:49.203 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-20 02:01:53.959 00:05:53.070 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 02:02:45.285 00:05:01.704 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 02:03:45.198 00:05:01.876 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 02:03:46.987 00:05:06.999 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 02:04:44.258 00:05:02.731 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 02:04:45.265 00:05:01.746 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 02:10:08.945 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:10:08.864 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:10:09.075 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:10:09.070 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:10:09.162 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:10:09.027 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:05:54.244 00:05:52.745 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 02:06:47.068 00:05:07.157 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 02:07:09.212 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2452 1 2025-10-20 02:07:45.221 00:05:01.768 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 02:08:45.286 00:05:01.703 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 02:07:53.966 00:05:53.063 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 02:09:45.203 00:05:01.867 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 02:09:46.989 00:05:07.000 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 02:10:45.266 00:05:01.745 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 02:10:44.260 00:05:02.729 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 02:15:09.292 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:15:09.172 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:15:09.381 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:15:09.384 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:15:09.435 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:15:09.371 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:12:29.214 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2764 1 2025-10-20 02:11:54.245 00:05:52.747 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 02:12:47.069 00:05:07.157 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 02:13:45.224 00:05:01.769 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 02:13:53.969 00:05:53.065 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 02:14:45.287 00:05:01.706 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 02:15:45.204 00:05:01.871 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 02:15:46.989 00:05:07.003 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 02:20:09.084 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:20:09.188 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:20:09.397 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:20:09.288 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:20:09.166 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:20:09.163 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:16:45.267 00:05:01.747 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 02:16:44.262 00:05:02.731 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 02:17:49.218 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-20 02:17:54.247 00:05:52.747 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 02:18:47.073 00:05:07.173 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 02:19:45.226 00:05:01.770 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 02:19:53.972 00:05:53.063 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 02:20:45.288 00:05:01.707 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 02:25:09.544 00:00:00.013 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:25:09.484 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:25:09.412 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:25:09.297 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:25:09.217 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:25:09.325 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:21:45.204 00:05:01.872 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 02:21:46.994 00:05:06.999 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 02:22:45.269 00:05:01.747 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 02:22:44.264 00:05:02.731 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 02:23:09.223 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2596 1 2025-10-20 02:23:54.267 00:05:52.729 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 02:24:47.076 00:05:07.155 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 02:25:45.227 00:05:01.770 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 02:30:09.615 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:30:09.614 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:30:09.495 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:30:09.353 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:30:09.272 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:30:09.405 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:26:45.289 00:05:01.707 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 02:25:53.972 00:05:53.064 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 02:27:45.207 00:05:01.870 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 02:27:46.994 00:05:06.999 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 02:28:29.228 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-20 02:28:44.267 00:05:02.729 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 02:28:45.270 00:05:01.747 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 02:29:54.252 00:05:52.745 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 02:30:47.076 00:05:07.163 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 02:35:09.700 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:35:09.757 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:35:09.567 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:35:09.321 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:35:09.240 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:35:09.489 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:31:45.227 00:05:01.770 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 02:32:45.290 00:05:01.706 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 02:31:53.974 00:05:53.063 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 02:33:45.209 00:05:01.869 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 02:33:46.996 00:05:07.002 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 02:33:49.230 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-20 02:34:44.268 00:05:02.728 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 02:34:45.270 00:05:01.747 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 02:40:09.865 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:40:09.598 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:40:09.681 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:40:09.555 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:40:09.474 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:40:09.654 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:35:54.259 00:05:52.737 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 02:36:47.077 00:05:07.163 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 02:37:45.233 00:05:01.765 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 02:37:53.977 00:05:53.061 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 02:38:45.294 00:05:01.703 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 02:39:09.235 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2848 1 2025-10-20 02:39:45.209 00:05:01.869 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 02:39:46.996 00:05:07.002 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 02:40:44.270 00:05:02.727 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 02:40:45.275 00:05:01.744 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 02:45:09.965 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:45:09.841 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:45:09.837 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:45:09.757 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:45:09.818 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:45:10.027 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:41:54.260 00:05:52.738 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 02:42:47.078 00:05:07.163 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 02:43:45.233 00:05:01.767 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 02:44:29.242 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2448 1 2025-10-20 02:43:53.977 00:05:53.062 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 02:44:45.294 00:05:01.705 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 02:45:45.212 00:05:01.869 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 02:45:46.998 00:05:00.003 TCP 27.156.0.1:34437 -> 27.153.0.1:179 11 686 1 2025-10-20 02:50:09.713 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:50:09.859 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:50:09.918 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:50:09.802 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:50:09.792 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:50:10.069 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:46:45.275 00:05:01.745 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 02:46:44.274 00:05:02.727 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 02:47:54.261 00:05:52.741 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 02:48:47.080 00:05:07.164 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 02:49:45.232 00:05:01.770 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 02:49:49.246 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2660 1 2025-10-20 02:50:45.296 00:05:01.705 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 02:49:53.979 00:05:53.062 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 02:55:10.408 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 02:55:10.299 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 02:55:10.509 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:55:10.573 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:55:10.451 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:55:10.487 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 02:51:45.213 00:05:01.869 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 02:50:54.000 00:05:53.001 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 02:52:45.276 00:05:01.746 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 02:52:44.274 00:05:02.727 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 02:53:54.263 00:05:52.739 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 Summary: total flows: 173, total bytes: 112504, total packets: 1694, avg bps: 230, avg pps: 0, avg bpp: 66 Time window: 2025-10-20 01:54:47 - 2025-10-20 02:59:47 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0041s User: 0.0010s Wall: 0.0026s flows/second: 66363.1 Runtime: 0.0026s