Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 05:54:47.174 00:05:07.116 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 05:55:45.319 00:05:01.777 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 06:00:13.300 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:00:13.314 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:00:13.402 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:00:13.381 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:00:13.525 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:00:13.506 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 05:56:19.490 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2452 1 2025-10-20 05:55:54.074 00:05:53.061 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 05:56:45.350 00:05:01.745 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 05:57:45.298 00:05:01.878 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 05:56:54.096 00:05:53.000 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 05:58:44.333 00:05:02.762 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 05:58:45.331 00:05:01.785 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 05:59:54.310 00:05:52.785 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 06:00:47.175 00:05:07.123 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 06:05:13.771 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:05:13.899 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:05:13.940 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:05:13.781 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:05:13.691 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:05:13.689 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:01:39.502 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2580 1 2025-10-20 06:01:45.320 00:05:01.776 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 06:02:45.351 00:05:01.745 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 06:01:54.076 00:05:53.061 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 06:03:45.300 00:05:01.877 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 06:02:54.098 00:05:52.998 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 06:04:44.336 00:05:02.761 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 06:04:45.332 00:05:01.785 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 06:10:13.833 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:10:13.967 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:10:13.702 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:10:13.914 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:10:13.620 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:10:13.703 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:05:54.319 00:05:52.778 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 06:06:47.176 00:05:07.126 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 06:06:59.504 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2464 1 2025-10-20 06:07:45.321 00:05:01.776 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 06:07:54.080 00:05:53.057 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 06:08:45.353 00:05:01.745 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 06:09:45.301 00:05:01.876 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 06:08:54.101 00:05:52.997 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 06:10:44.338 00:05:02.759 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 06:10:45.332 00:05:01.785 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 06:15:13.739 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:15:13.886 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:15:14.097 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:15:14.169 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:15:13.903 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:15:13.820 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:12:19.511 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2596 1 2025-10-20 06:11:54.322 00:05:52.776 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 06:12:47.177 00:05:07.125 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 06:13:45.323 00:05:01.776 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 06:13:54.081 00:05:53.057 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 06:14:45.353 00:05:01.745 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 06:15:45.308 00:05:01.871 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 06:14:54.102 00:05:52.997 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 06:20:14.011 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:20:14.136 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:20:14.135 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:20:14.020 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:20:13.930 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:20:13.926 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:16:45.334 00:05:01.785 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 06:16:44.339 00:05:02.760 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 06:17:39.516 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-20 06:17:54.323 00:05:52.777 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 06:18:47.178 00:05:07.126 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 06:19:45.321 00:05:01.779 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 06:19:54.086 00:05:53.054 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 06:20:45.355 00:05:01.745 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 06:25:14.181 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:25:14.175 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:25:14.145 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:25:14.238 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:25:14.158 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:25:13.971 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:21:45.301 00:05:01.880 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 06:20:54.104 00:05:52.996 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 06:22:45.336 00:05:01.784 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 06:22:44.341 00:05:02.760 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 06:22:59.521 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-20 06:23:54.324 00:05:52.776 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 06:24:47.180 00:05:07.125 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 06:25:45.321 00:05:01.779 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 06:30:14.194 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:30:14.122 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:30:14.332 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:30:14.395 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:30:14.278 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:30:14.274 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:26:45.358 00:05:01.742 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 06:25:54.085 00:05:53.055 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 06:26:54.108 00:05:52.994 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 06:27:45.302 00:05:01.879 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 06:28:19.525 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2644 1 2025-10-20 06:28:45.338 00:05:01.782 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 06:28:44.341 00:05:02.759 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 06:29:54.324 00:05:52.777 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 06:30:47.180 00:05:07.127 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 06:35:14.603 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:35:14.735 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:35:14.552 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:35:14.527 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:35:14.523 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:35:14.524 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:31:45.322 00:05:01.780 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 06:31:54.087 00:05:53.055 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 06:32:45.360 00:05:01.743 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 06:33:45.302 00:05:01.880 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 06:32:54.108 00:05:52.995 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 06:33:39.529 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2548 1 2025-10-20 06:34:45.344 00:05:01.779 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 06:34:44.341 00:05:02.761 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 06:40:14.594 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:40:14.433 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:40:14.567 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:40:14.306 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:40:14.383 00:00:00.020 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:40:14.225 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:35:54.327 00:05:52.775 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 06:36:47.183 00:05:07.125 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 06:37:45.324 00:05:01.779 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 06:38:45.365 00:05:01.738 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 06:37:54.089 00:05:53.056 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 06:38:59.534 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2516 1 2025-10-20 06:39:45.304 00:05:01.881 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 06:38:54.109 00:05:52.997 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 06:40:45.346 00:05:01.779 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 06:40:44.345 00:05:02.760 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 06:45:14.640 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:45:14.700 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:45:14.509 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:45:14.429 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:45:14.350 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:45:14.431 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:41:54.328 00:05:52.777 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 06:42:47.215 00:05:07.096 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 06:43:45.325 00:05:01.781 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 06:44:19.537 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-20 06:43:54.090 00:05:53.057 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 06:44:45.370 00:05:01.737 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 06:45:45.304 00:05:01.881 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 06:44:54.110 00:05:52.996 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 06:50:14.503 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:50:14.584 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:50:14.713 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:50:14.837 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:50:14.593 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:50:14.664 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:46:45.348 00:05:01.778 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 06:46:44.344 00:05:02.761 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 06:47:54.330 00:05:52.776 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 06:48:47.186 00:05:07.124 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 06:49:45.326 00:05:01.780 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 06:49:39.551 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-20 06:50:45.369 00:05:01.744 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 06:49:54.092 00:05:53.062 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 06:55:14.820 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:55:14.973 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:55:14.829 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:55:14.743 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:55:14.765 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 06:55:15.034 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 06:51:45.305 00:05:01.881 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 06:50:54.111 00:05:52.995 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 06:52:44.345 00:05:02.761 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 06:52:45.358 00:05:01.768 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 06:53:54.332 00:05:52.776 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 Summary: total flows: 173, total bytes: 112188, total packets: 1693, avg bps: 230, avg pps: 0, avg bpp: 66 Time window: 2025-10-20 05:54:47 - 2025-10-20 06:59:47 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0046s User: 0.0011s Wall: 0.0019s flows/second: 89915.1 Runtime: 0.0019s