Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 08:54:47.212 00:05:07.140 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 08:55:45.358 00:05:01.784 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 09:00:17.462 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:00:17.320 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:00:17.331 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:00:17.385 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:00:17.305 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:00:17.252 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 08:56:45.442 00:05:01.691 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 08:55:54.123 00:05:53.051 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 08:57:29.721 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-10-20 08:56:54.143 00:05:52.991 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 08:57:45.338 00:05:01.876 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 08:58:45.424 00:05:01.731 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 08:58:44.385 00:05:02.749 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 08:59:54.372 00:05:52.762 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 09:00:47.222 00:05:07.131 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 09:05:17.505 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:05:17.506 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:05:17.165 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:05:17.324 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:05:17.243 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:05:17.294 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:01:45.360 00:05:01.775 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 09:01:54.123 00:05:53.051 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 09:02:45.444 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 09:02:49.729 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2516 1 2025-10-20 09:02:54.144 00:05:52.990 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 09:03:45.342 00:05:01.873 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 09:04:44.385 00:05:02.749 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 09:04:45.424 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 09:10:17.604 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:10:17.274 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:10:17.726 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:10:17.686 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:10:17.486 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:10:17.587 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:05:54.374 00:05:52.763 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 09:06:47.215 00:05:07.139 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 09:07:45.362 00:05:01.775 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 09:08:09.736 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2600 1 2025-10-20 09:07:54.125 00:05:53.056 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 09:08:45.446 00:05:01.693 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 09:08:54.145 00:05:52.993 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 09:09:45.342 00:05:01.877 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 09:10:45.431 00:05:01.728 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 09:10:44.387 00:05:02.751 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 09:15:17.727 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:15:17.552 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:15:17.739 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:15:17.678 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:15:17.471 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:15:17.528 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:11:54.375 00:05:52.765 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 09:12:47.217 00:05:07.137 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 09:13:29.742 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-20 09:13:45.362 00:05:01.777 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 09:14:45.450 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 09:13:54.126 00:05:53.053 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 09:14:54.146 00:05:52.993 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 09:15:45.343 00:05:01.877 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 09:20:17.592 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:20:17.626 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:20:17.867 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:20:17.412 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:20:17.673 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:20:17.837 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:16:44.388 00:05:02.752 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 09:16:45.431 00:05:01.729 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 09:17:54.374 00:05:52.766 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 09:18:47.219 00:05:07.136 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 09:18:49.747 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2684 1 2025-10-20 09:19:45.365 00:05:01.775 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 09:19:54.129 00:05:53.052 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 09:20:45.452 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 09:25:18.112 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:25:17.881 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:25:17.881 00:00:00.026 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:25:17.938 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:25:17.802 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:25:17.729 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:20:54.148 00:05:52.992 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 09:21:45.345 00:05:01.876 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 09:22:45.432 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 09:22:44.390 00:05:02.752 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 09:24:09.752 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2588 1 2025-10-20 09:23:54.376 00:05:52.767 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 09:24:47.221 00:05:07.136 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 09:25:45.367 00:05:01.777 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 09:30:17.906 00:00:00.020 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:30:18.041 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:30:18.081 00:00:00.027 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:30:17.906 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:30:17.823 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:30:17.830 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:25:54.129 00:05:53.055 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 09:26:45.453 00:05:01.692 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 09:27:45.347 00:05:01.878 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 09:26:54.150 00:05:52.995 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 09:28:44.391 00:05:02.754 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 09:28:45.433 00:05:01.732 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 09:29:29.759 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2724 1 2025-10-20 09:29:54.376 00:05:52.769 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 09:30:47.224 00:05:07.133 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 09:35:17.973 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:35:17.852 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:35:17.755 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:35:17.978 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:35:17.676 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:35:17.768 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:31:45.368 00:05:01.779 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 09:31:54.132 00:05:53.054 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 09:32:45.454 00:05:01.692 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 09:32:54.151 00:05:52.994 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 09:33:45.349 00:05:01.877 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 09:34:44.391 00:05:02.754 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 09:34:45.434 00:05:01.732 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 09:34:49.769 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-20 09:40:18.078 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:40:18.077 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:40:18.099 00:00:00.028 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:40:17.847 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:40:17.767 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:40:17.867 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:35:54.377 00:05:52.769 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 09:36:47.226 00:05:07.136 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 09:37:45.373 00:05:01.775 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 09:38:45.457 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 09:37:54.135 00:05:53.053 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 09:39:45.354 00:05:01.873 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 09:38:54.154 00:05:52.993 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 09:40:09.775 00:05:10.034 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-20 09:40:45.437 00:05:01.731 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 09:40:44.393 00:05:02.754 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 09:45:18.231 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:45:17.980 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:45:18.398 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:45:18.303 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:45:17.901 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:45:18.189 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:41:54.384 00:05:52.771 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 09:42:47.226 00:05:07.138 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 09:43:45.376 00:05:01.779 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 09:44:45.458 00:05:01.696 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 09:43:54.135 00:05:53.058 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 09:45:29.785 00:05:00.874 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2368 1 2025-10-20 09:45:45.355 00:05:01.880 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 09:44:54.156 00:05:52.999 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 09:50:18.150 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:50:18.274 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:50:18.485 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:50:18.409 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:50:18.328 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:50:18.231 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:46:45.440 00:05:01.735 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 09:46:44.396 00:05:02.759 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 09:47:54.385 00:05:52.770 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-20 09:48:47.234 00:05:07.136 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-20 09:49:45.374 00:05:01.781 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-20 09:49:54.137 00:05:53.060 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-20 09:50:45.466 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-20 09:50:39.788 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2472 1 2025-10-20 09:55:18.397 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:55:18.393 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:55:18.471 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:55:18.261 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-20 09:55:18.182 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:55:18.187 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-20 09:50:54.156 00:05:53.000 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-20 09:51:45.358 00:05:01.879 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-20 09:52:45.446 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-20 09:52:44.395 00:05:02.760 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-20 09:53:54.391 00:05:52.771 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 Summary: total flows: 173, total bytes: 112284, total packets: 1692, avg bps: 230, avg pps: 0, avg bpp: 66 Time window: 2025-10-20 08:54:47 - 2025-10-20 09:59:47 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0029s User: 0.0019s Wall: 0.0022s flows/second: 79362.9 Runtime: 0.0022s