Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 13:54:51.883 00:05:01.986 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-02 13:56:51.868 00:05:02.001 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-02 13:56:51.236 00:05:02.633 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-02 13:56:53.950 00:05:06.876 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-02 14:01:39.215 00:00:00.038 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:01:38.885 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:01:38.768 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:01:39.349 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:01:39.268 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 13:57:26.559 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2360 1 2025-11-02 14:01:39.005 00:00:00.037 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 13:57:51.864 00:05:02.086 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-02 13:57:51.848 00:05:02.042 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-02 13:57:00.847 00:05:53.024 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-02 13:57:53.910 00:05:06.929 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-02 13:58:53.870 00:05:06.990 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-02 14:00:51.889 00:05:01.982 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-02 14:06:39.180 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:06:39.403 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:06:39.302 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:06:39.191 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:06:39.099 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:06:39.192 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:02:51.869 00:05:02.001 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-02 14:02:51.238 00:05:02.632 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-02 14:02:46.574 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2624 1 2025-11-02 14:02:53.950 00:05:06.877 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-02 14:03:51.869 00:05:02.082 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-02 14:03:51.849 00:05:02.041 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-02 14:03:00.847 00:05:53.024 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-02 14:03:53.910 00:05:06.930 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-02 14:04:53.870 00:05:06.991 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-02 14:06:51.890 00:05:01.984 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-02 14:11:39.114 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:11:39.113 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:11:39.323 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:11:39.451 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:11:39.330 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:11:39.194 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:08:06.577 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-02 14:08:51.873 00:05:02.000 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-02 14:08:51.241 00:05:02.632 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-02 14:08:53.951 00:05:06.877 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-02 14:09:51.871 00:05:02.084 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-02 14:09:51.856 00:05:02.039 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-02 14:09:00.847 00:05:53.026 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-02 14:09:53.912 00:05:06.932 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-02 14:10:53.871 00:05:06.993 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-02 14:16:39.524 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:16:39.404 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:16:39.335 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:16:39.526 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:16:39.255 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:16:39.315 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:12:51.891 00:05:01.983 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-02 14:13:26.585 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2784 1 2025-11-02 14:14:51.883 00:05:01.992 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-02 14:14:51.243 00:05:02.632 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-02 14:14:53.954 00:05:06.876 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-02 14:15:51.871 00:05:02.084 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-02 14:15:51.862 00:05:02.033 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-02 14:15:00.849 00:05:53.026 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-02 14:15:53.914 00:05:06.931 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-02 14:16:53.875 00:05:06.991 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-02 14:21:39.926 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:21:40.137 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:21:40.039 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:21:40.170 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:21:40.091 00:00:00.045 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:21:40.013 00:00:00.044 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:18:51.891 00:05:01.984 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-02 14:18:46.590 00:05:10.151 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2628 1 2025-11-02 14:20:51.885 00:05:01.995 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-02 14:20:51.246 00:05:02.633 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-02 14:20:53.956 00:05:06.875 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-02 14:21:00.850 00:05:53.026 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-02 14:21:51.872 00:05:02.085 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-02 14:21:51.864 00:05:02.032 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-02 14:21:53.916 00:05:06.931 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-02 14:26:39.713 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:26:39.705 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:26:39.448 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:26:39.526 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:26:39.445 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:26:39.503 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:22:53.875 00:05:06.991 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-02 14:24:06.602 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2376 1 2025-11-02 14:24:51.891 00:05:01.985 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-02 14:26:51.885 00:05:01.992 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-02 14:26:51.249 00:05:02.628 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-02 14:26:53.956 00:05:06.877 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-02 14:31:39.667 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:31:39.740 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:31:39.741 00:00:00.031 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:31:39.614 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:31:39.534 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:31:39.457 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:27:51.893 00:05:02.065 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-02 14:27:51.867 00:05:02.031 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-02 14:27:00.851 00:05:53.027 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-02 14:27:53.916 00:05:06.933 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-02 14:28:53.876 00:05:06.993 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-02 14:29:26.608 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-02 14:30:51.914 00:05:01.966 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-02 14:36:39.936 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:36:39.973 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:36:39.892 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:36:39.830 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:36:40.041 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:36:39.989 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:32:51.893 00:05:01.985 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-02 14:32:51.248 00:05:02.630 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-02 14:32:53.959 00:05:06.876 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-02 14:33:51.867 00:05:02.032 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-02 14:33:51.897 00:05:02.062 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-02 14:33:00.853 00:05:53.026 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-02 14:33:53.917 00:05:06.934 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-02 14:34:46.621 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-02 14:34:53.877 00:05:06.995 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-02 14:36:51.917 00:05:01.964 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-02 14:41:39.900 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:41:40.099 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:41:39.982 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:41:40.313 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:41:40.391 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:41:40.180 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:38:51.889 00:05:01.997 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-02 14:38:51.249 00:05:02.637 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-02 14:38:53.960 00:05:06.876 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-02 14:39:51.897 00:05:02.064 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-02 14:39:51.868 00:05:02.033 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-02 14:39:00.854 00:05:53.028 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-02 14:39:53.920 00:05:06.934 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-02 14:40:06.630 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2784 1 2025-11-02 14:40:53.881 00:05:06.995 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-02 14:46:39.896 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:46:39.893 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:46:39.814 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:46:39.923 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:46:40.134 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:46:40.129 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:42:51.919 00:05:01.964 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-02 14:44:51.889 00:05:01.993 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-02 14:44:51.250 00:05:02.632 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-02 14:44:53.961 00:05:06.876 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-02 14:45:26.639 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-02 14:45:51.898 00:05:02.065 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-02 14:45:51.870 00:05:02.033 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-02 14:45:00.857 00:05:53.026 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-02 14:45:53.922 00:05:06.931 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-02 14:46:53.882 00:05:06.993 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-02 14:51:39.949 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:51:39.996 00:00:00.042 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:51:40.142 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:51:40.352 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:51:40.199 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:51:40.076 00:00:00.043 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:48:51.926 00:05:01.958 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-02 14:50:51.893 00:05:01.990 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-02 14:50:51.252 00:05:02.631 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-02 14:50:46.649 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2564 1 2025-11-02 14:50:53.962 00:05:06.878 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-02 14:51:51.899 00:05:02.065 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-02 14:51:51.874 00:05:02.030 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-02 14:51:00.858 00:05:53.025 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-02 14:51:53.923 00:05:06.934 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-02 14:56:40.294 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:56:40.297 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:56:40.220 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:56:40.067 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-02 14:56:39.987 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:56:40.084 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-02 14:52:53.883 00:05:06.995 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112508, total packets: 1694, avg bps: 237, avg pps: 0, avg bpp: 66 Time window: 2025-11-02 13:54:51 - 2025-11-02 14:58:00 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0060s User: 0.0009s Wall: 0.0044s flows/second: 39515.0 Runtime: 0.0044s