Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 04:54:53.577 00:05:01.568 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 04:55:55.221 00:05:06.881 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 04:56:02.270 00:05:52.915 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 04:56:02.118 00:05:53.027 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 04:56:53.603 00:05:01.542 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 04:56:52.453 00:05:02.692 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 04:57:02.291 00:05:52.856 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 04:57:53.558 00:05:01.670 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 04:57:53.584 00:05:01.583 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 05:02:54.923 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:02:54.692 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:02:54.904 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:02:54.942 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:02:55.060 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:02:55.006 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 04:59:21.915 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2756 1 2025-11-05 05:00:53.577 00:05:01.570 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 05:01:55.226 00:05:06.875 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 05:02:02.270 00:05:52.918 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 05:02:02.121 00:05:53.028 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 05:02:53.605 00:05:01.544 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 05:02:52.455 00:05:02.694 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 05:07:54.835 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:07:54.839 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:07:54.920 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:03:53.558 00:05:01.671 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 05:07:55.046 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:07:55.195 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:03:53.585 00:05:01.583 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 05:07:54.984 00:00:00.028 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:03:02.291 00:05:52.857 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 05:04:41.917 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2668 1 2025-11-05 05:06:53.580 00:05:01.574 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 05:07:55.229 00:05:06.874 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 05:12:55.640 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:12:55.700 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:08:02.121 00:05:53.029 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 05:08:53.606 00:05:01.544 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 05:08:52.455 00:05:02.695 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 05:12:55.850 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:12:55.849 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:12:55.675 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:08:02.272 00:05:52.918 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 05:12:55.780 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:09:02.291 00:05:52.860 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 05:09:53.561 00:05:01.672 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 05:09:53.588 00:05:01.585 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 05:10:01.921 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2628 1 2025-11-05 05:12:53.587 00:05:01.564 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 05:17:55.358 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:17:55.291 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:17:55.287 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:17:55.165 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:17:55.083 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:17:55.146 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:13:55.230 00:05:06.875 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 05:14:02.273 00:05:52.920 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 05:14:02.124 00:05:53.028 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 05:14:53.609 00:05:01.543 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 05:14:52.459 00:05:02.693 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 05:15:21.925 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-05 05:15:53.568 00:05:01.664 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 05:15:53.589 00:05:01.583 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 05:15:02.292 00:05:52.859 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 05:22:55.242 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:18:53.589 00:05:01.564 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 05:22:55.243 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:22:55.455 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:22:55.387 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:22:55.429 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:22:55.323 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:19:55.232 00:05:06.874 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 05:20:41.934 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-05 05:20:02.275 00:05:52.918 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 05:20:02.125 00:05:53.028 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 05:20:53.609 00:05:01.544 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 05:20:52.461 00:05:02.692 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 05:21:53.576 00:05:01.658 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 05:21:53.590 00:05:01.584 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 05:21:02.295 00:05:52.858 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 05:27:55.605 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:27:55.633 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:27:55.179 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:27:55.177 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:27:55.098 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:27:55.395 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:24:53.590 00:05:01.569 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 05:25:55.232 00:05:06.876 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 05:26:01.945 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2876 1 2025-11-05 05:26:02.127 00:05:53.031 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 05:26:53.614 00:05:01.544 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 05:26:52.461 00:05:02.697 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 05:26:02.275 00:05:52.923 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 05:27:02.296 00:05:52.862 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 05:27:53.570 00:05:01.668 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 05:27:53.590 00:05:01.588 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 05:32:55.664 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:32:55.768 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:32:55.482 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:32:55.586 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:32:55.506 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:32:55.454 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:30:53.591 00:05:01.568 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 05:31:21.954 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-05 05:31:55.238 00:05:06.870 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 05:32:02.127 00:05:53.032 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 05:32:53.610 00:05:01.549 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 05:32:52.482 00:05:02.677 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 05:32:02.278 00:05:52.922 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 05:33:02.298 00:05:52.862 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 05:37:55.425 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:37:55.746 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:33:53.572 00:05:01.669 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 05:37:55.958 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:37:55.727 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:33:53.592 00:05:01.589 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 05:37:55.712 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:37:55.506 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:36:41.965 00:05:10.013 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2624 1 2025-11-05 05:36:53.592 00:05:01.569 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 05:37:55.239 00:05:06.870 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 05:42:55.662 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:42:55.603 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:38:02.128 00:05:53.032 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 05:38:53.611 00:05:01.549 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 05:38:52.483 00:05:02.677 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 05:42:55.874 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:42:55.867 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:42:55.603 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:38:02.281 00:05:52.921 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 05:42:55.685 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:39:53.592 00:05:01.589 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 05:39:53.572 00:05:01.670 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 05:39:02.300 00:05:52.861 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 05:42:01.972 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-05 05:42:53.594 00:05:01.568 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 05:47:55.765 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:47:55.808 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:47:56.020 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:47:55.830 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:47:55.793 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:47:55.845 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:43:55.241 00:05:06.874 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 05:44:02.129 00:05:53.032 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 05:44:53.612 00:05:01.549 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 05:44:52.484 00:05:02.677 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 05:44:02.282 00:05:52.920 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 05:45:02.303 00:05:52.858 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 05:45:53.572 00:05:01.670 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 05:45:53.592 00:05:01.590 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 05:47:21.983 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2584 1 2025-11-05 05:52:56.260 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:48:53.593 00:05:01.570 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 05:52:56.220 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 05:52:56.430 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:52:56.418 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:52:56.307 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:52:56.340 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:49:55.242 00:05:06.874 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 05:50:02.138 00:05:53.025 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 05:50:53.614 00:05:01.549 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 05:50:52.485 00:05:02.678 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 05:50:02.286 00:05:52.917 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 05:51:02.305 00:05:52.857 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 05:51:53.573 00:05:01.670 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 05:51:53.596 00:05:01.586 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 05:52:41.990 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-05 05:57:56.184 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:57:56.136 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:57:55.951 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:57:56.053 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 05:57:55.973 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 05:57:55.974 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112692, total packets: 1696, avg bps: 238, avg pps: 0, avg bpp: 66 Time window: 2025-11-05 04:54:53 - 2025-11-05 05:57:56 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0043s User: 0.0021s Wall: 0.0026s flows/second: 66926.3 Runtime: 0.0026s