Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 09:54:53.744 00:05:01.488 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 09:55:55.312 00:05:06.880 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 09:56:02.211 00:05:53.021 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 09:56:53.709 00:05:01.523 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 09:56:52.547 00:05:02.685 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 09:56:02.372 00:05:52.901 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 09:57:42.377 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2564 1 2025-11-05 09:57:02.393 00:05:52.841 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 09:57:53.730 00:05:01.583 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 09:57:53.691 00:05:01.562 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 10:03:01.281 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:03:01.130 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:03:01.156 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:03:01.192 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:03:01.073 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:03:01.114 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:00:53.747 00:05:01.487 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 10:01:55.313 00:05:06.881 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 10:02:02.373 00:05:52.902 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 10:02:02.213 00:05:53.022 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 10:02:53.716 00:05:01.519 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 10:02:52.549 00:05:02.686 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 10:03:02.380 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2584 1 2025-11-05 10:03:02.392 00:05:52.842 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 10:03:53.729 00:05:01.587 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 10:03:53.693 00:05:01.562 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 10:08:00.898 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:08:01.017 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:08:01.034 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:08:00.901 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:08:00.818 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:08:00.807 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:06:53.751 00:05:01.485 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 10:07:55.316 00:05:06.881 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 10:08:22.386 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-05 10:08:02.213 00:05:53.023 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 10:08:53.712 00:05:01.524 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 10:08:52.549 00:05:02.687 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 10:08:02.375 00:05:52.901 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 10:13:01.293 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:13:01.129 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:13:01.012 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:13:01.005 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:13:00.924 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:13:01.083 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:09:02.395 00:05:52.842 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 10:09:53.733 00:05:01.585 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 10:09:53.694 00:05:01.564 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 10:12:53.752 00:05:01.487 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 10:13:42.396 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2724 1 2025-11-05 10:18:01.155 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:18:01.386 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:18:01.596 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:18:01.379 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:18:01.251 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:13:55.316 00:05:06.883 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 10:18:01.235 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:14:53.714 00:05:01.531 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 10:14:52.550 00:05:02.695 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 10:14:02.216 00:05:53.029 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 10:14:02.384 00:05:52.900 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 10:15:53.747 00:05:01.578 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 10:15:53.694 00:05:01.570 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 10:15:02.400 00:05:52.845 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 10:18:53.775 00:05:01.470 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 10:23:01.237 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:23:01.230 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:23:01.442 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:23:01.438 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:23:01.316 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:23:01.318 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:19:02.403 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-05 10:19:55.326 00:05:06.876 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 10:20:02.382 00:05:52.905 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 10:20:53.717 00:05:01.532 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 10:20:52.554 00:05:02.694 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 10:20:02.222 00:05:53.027 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 10:21:53.751 00:05:01.576 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 10:21:53.696 00:05:01.571 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 10:21:02.402 00:05:52.845 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 10:28:01.595 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:28:01.427 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:28:01.469 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:28:01.322 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:28:01.384 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:28:01.241 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:24:22.413 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2768 1 2025-11-05 10:24:53.773 00:05:01.475 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 10:25:55.327 00:05:06.876 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 10:26:02.221 00:05:53.027 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 10:26:53.717 00:05:01.531 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 10:26:52.553 00:05:02.695 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 10:26:02.384 00:05:52.906 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 10:27:53.755 00:05:01.574 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 10:27:53.698 00:05:01.571 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 10:27:02.402 00:05:52.846 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 10:33:01.390 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:33:01.312 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:33:01.600 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:33:01.510 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:33:01.392 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:33:01.392 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:29:42.423 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-05 10:30:53.776 00:05:01.475 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 10:31:55.329 00:05:06.877 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 10:32:02.224 00:05:53.026 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 10:32:53.722 00:05:01.528 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 10:32:52.556 00:05:02.694 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 10:32:02.384 00:05:52.906 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 10:33:02.404 00:05:52.846 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 10:38:01.410 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:38:01.511 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:33:53.755 00:05:01.575 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 10:33:53.703 00:05:01.566 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 10:38:01.721 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:38:01.606 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:38:01.576 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:38:01.490 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:35:02.432 00:05:10.014 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-05 10:36:53.780 00:05:01.471 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 10:37:55.330 00:05:06.879 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 10:38:02.229 00:05:53.023 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 10:38:53.726 00:05:01.526 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 10:38:52.560 00:05:02.692 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 10:38:02.385 00:05:52.907 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 10:43:02.599 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:43:02.649 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:43:02.303 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:43:02.409 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:43:02.389 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:43:02.330 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:39:02.404 00:05:52.848 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 10:39:53.761 00:05:01.571 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 10:39:53.705 00:05:01.566 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 10:40:22.446 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2624 1 2025-11-05 10:42:53.782 00:05:01.471 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 10:48:01.993 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:48:02.129 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:48:01.861 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:43:55.331 00:05:06.880 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 10:48:01.862 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:48:01.781 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:48:01.782 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:44:02.386 00:05:52.913 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 10:44:53.727 00:05:01.530 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 10:44:52.561 00:05:02.696 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 10:44:02.230 00:05:53.027 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 10:45:42.449 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2516 1 2025-11-05 10:45:02.406 00:05:52.851 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 10:45:53.761 00:05:01.576 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 10:45:53.706 00:05:01.571 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 10:48:53.783 00:05:01.475 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 10:53:02.345 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:53:02.239 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 10:53:02.450 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:53:02.705 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:53:02.588 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:53:02.426 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:49:55.350 00:05:06.864 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 10:50:53.745 00:05:01.513 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 10:50:52.562 00:05:02.696 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 10:50:02.232 00:05:53.026 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 10:50:02.387 00:05:52.912 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 10:51:02.457 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2704 1 2025-11-05 10:51:53.770 00:05:01.570 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 10:51:53.713 00:05:01.567 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 10:51:02.408 00:05:52.852 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 10:58:02.149 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:58:02.361 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:58:02.498 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:58:02.378 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 10:58:02.069 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 10:58:02.151 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112640, total packets: 1694, avg bps: 237, avg pps: 0, avg bpp: 66 Time window: 2025-11-05 09:54:53 - 2025-11-05 10:58:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0042s User: 0.0011s Wall: 0.0025s flows/second: 70121.2 Runtime: 0.0025s