Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 08:54:52.448 00:05:01.819 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-03 08:56:52.428 00:05:01.840 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-03 08:56:51.590 00:05:02.678 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-03 08:56:54.347 00:05:06.860 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-03 08:56:54.267 00:05:06.961 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-03 08:57:08.265 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2564 1 2025-11-03 08:57:52.430 00:05:01.922 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-03 08:57:52.408 00:05:01.881 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-03 08:57:01.304 00:05:53.005 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-03 08:57:54.267 00:05:07.060 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-03 09:02:01.710 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:02:01.859 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:02:02.069 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:02:02.069 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:02:01.944 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:02:01.790 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:00:52.450 00:05:01.819 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-03 09:02:28.276 00:05:10.079 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2560 1 2025-11-03 09:07:02.193 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:07:02.201 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:07:01.932 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:02:54.353 00:05:06.857 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-03 09:07:02.033 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:02:52.430 00:05:01.840 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-03 09:02:51.591 00:05:02.679 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-03 09:07:01.952 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:02:54.269 00:05:06.961 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-03 09:07:01.983 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:03:52.432 00:05:01.919 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-03 09:03:52.411 00:05:01.880 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-03 09:03:01.308 00:05:53.003 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-03 09:03:54.269 00:05:07.059 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-03 09:06:52.458 00:05:01.813 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-03 09:07:48.294 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-03 09:12:02.004 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:12:02.093 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:12:02.136 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:12:01.966 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:12:01.885 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:12:01.792 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:08:52.432 00:05:01.840 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-03 09:08:51.593 00:05:02.679 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-03 09:08:54.271 00:05:06.960 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-03 09:08:54.350 00:05:06.860 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-03 09:09:52.432 00:05:01.920 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-03 09:09:52.411 00:05:01.880 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-03 09:09:01.308 00:05:53.003 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-03 09:09:54.271 00:05:07.059 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-03 09:17:03.096 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:17:03.090 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:17:02.878 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:17:02.875 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:12:52.456 00:05:01.816 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-03 09:17:02.796 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:17:02.887 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:13:08.298 00:05:10.013 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-03 09:14:52.432 00:05:01.841 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-03 09:14:51.594 00:05:02.679 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-03 09:14:54.352 00:05:06.860 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-03 09:14:54.271 00:05:06.961 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-03 09:15:52.435 00:05:01.918 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-03 09:15:52.411 00:05:01.882 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-03 09:15:01.308 00:05:53.005 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-03 09:15:54.272 00:05:07.062 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-03 09:22:02.196 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:22:02.434 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:22:02.232 00:00:00.027 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:22:02.222 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:22:01.986 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:22:02.142 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:18:28.309 00:05:10.248 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2580 1 2025-11-03 09:18:52.455 00:05:01.818 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-03 09:20:52.433 00:05:01.841 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-03 09:20:51.594 00:05:02.680 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-03 09:20:54.353 00:05:06.860 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-03 09:20:54.274 00:05:06.961 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-03 09:21:52.436 00:05:01.919 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-03 09:21:52.413 00:05:01.881 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-03 09:21:01.314 00:05:53.000 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-03 09:21:54.274 00:05:07.062 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-03 09:27:02.539 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:27:02.641 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:27:02.477 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:27:02.408 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:27:02.328 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:27:02.328 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:23:48.321 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2644 1 2025-11-03 09:24:52.459 00:05:01.818 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-03 09:26:52.434 00:05:01.841 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-03 09:26:51.595 00:05:02.680 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-03 09:26:54.274 00:05:06.961 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-03 09:26:54.355 00:05:06.860 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-03 09:27:52.439 00:05:01.918 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-03 09:27:52.416 00:05:01.881 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-03 09:27:01.317 00:05:53.000 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-03 09:32:02.759 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:32:02.651 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:32:02.514 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:32:02.510 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:27:54.274 00:05:07.062 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-03 09:32:02.430 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:32:02.549 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:29:08.329 00:05:10.038 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-03 09:30:52.462 00:05:01.814 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-03 09:32:52.436 00:05:01.841 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-03 09:32:51.601 00:05:02.676 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-03 09:37:03.228 00:00:00.035 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:37:03.248 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:37:03.276 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:32:54.356 00:05:06.864 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-03 09:37:03.133 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:37:03.052 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:32:54.275 00:05:06.964 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-03 09:37:03.018 00:00:00.034 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:33:52.443 00:05:01.914 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-03 09:33:52.415 00:05:01.882 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-03 09:33:01.316 00:05:53.001 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-03 09:33:54.275 00:05:07.063 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-03 09:34:28.330 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-03 09:36:52.462 00:05:01.815 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-03 09:42:02.718 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:42:02.539 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:42:02.749 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:42:02.998 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:42:02.918 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:42:02.799 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:38:52.444 00:05:01.833 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-03 09:38:51.602 00:05:02.675 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-03 09:38:54.276 00:05:06.963 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-03 09:38:54.357 00:05:06.863 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-03 09:39:52.442 00:05:01.915 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-03 09:39:52.416 00:05:01.881 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-03 09:39:01.318 00:05:52.999 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-03 09:39:48.335 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-03 09:39:54.278 00:05:07.062 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-03 09:42:52.462 00:05:01.815 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-03 09:47:02.629 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:47:02.625 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:47:02.835 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:47:03.005 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:47:02.627 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:47:02.709 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:44:52.438 00:05:01.841 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-03 09:44:51.603 00:05:02.676 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-03 09:44:54.278 00:05:06.963 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-03 09:44:54.358 00:05:06.863 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-03 09:45:08.337 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2768 1 2025-11-03 09:45:52.443 00:05:01.916 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-03 09:45:52.418 00:05:01.881 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-03 09:45:01.319 00:05:53.000 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-03 09:45:54.278 00:05:07.069 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-03 09:52:02.817 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:52:02.818 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 09:52:03.026 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:52:03.019 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:52:02.988 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:52:02.896 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:48:52.464 00:05:01.817 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-03 09:50:28.342 00:05:10.001 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2724 1 2025-11-03 09:50:52.448 00:05:01.832 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-03 09:50:51.605 00:05:02.675 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-03 09:50:54.279 00:05:06.963 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-03 09:50:54.359 00:05:06.863 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-03 09:51:52.444 00:05:01.919 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-03 09:51:52.428 00:05:01.875 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-03 09:51:01.327 00:05:52.996 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-03 09:51:54.280 00:05:07.070 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-03 09:57:03.268 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:57:03.182 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:57:03.004 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:57:03.141 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-03 09:57:03.059 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-03 09:57:03.062 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112716, total packets: 1697, avg bps: 241, avg pps: 0, avg bpp: 66 Time window: 2025-11-03 08:54:52 - 2025-11-03 09:57:03 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0041s User: 0.0016s Wall: 0.0032s flows/second: 54746.8 Runtime: 0.0032s