Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 19:53:55.434 00:06:00.003 TCP 27.156.0.1:179 -> 27.158.0.1:40177 13 809 1 2025-11-05 19:55:55.517 00:05:06.870 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 19:56:02.405 00:05:53.030 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 19:56:53.905 00:05:01.530 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 19:56:52.717 00:05:02.718 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 19:56:02.557 00:05:52.920 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 19:57:02.575 00:05:52.860 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 19:57:53.978 00:05:01.539 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 19:57:53.886 00:05:01.570 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 20:03:12.918 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:03:12.848 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:03:13.058 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:03:12.964 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:03:13.113 00:00:00.030 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:03:12.997 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 19:59:43.278 00:05:10.018 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-05 20:00:53.998 00:05:00.002 TCP 27.156.0.1:179 -> 27.158.0.1:40177 11 667 1 2025-11-05 20:01:55.517 00:05:06.871 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 20:02:02.560 00:05:52.917 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 20:02:02.406 00:05:53.032 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 20:02:53.908 00:05:01.530 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 20:02:52.718 00:05:02.720 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 20:03:53.980 00:05:01.544 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 20:03:53.889 00:05:01.574 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 20:03:02.580 00:05:52.862 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 20:08:13.110 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:08:13.234 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:08:13.445 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:08:13.362 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:08:13.023 00:00:00.014 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:08:13.190 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:05:03.295 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-05 20:05:55.437 00:05:58.564 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 20:07:55.518 00:05:06.873 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 20:08:02.408 00:05:53.033 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 20:08:53.908 00:05:01.533 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 20:08:52.720 00:05:02.720 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 20:08:02.562 00:05:52.920 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 20:13:13.075 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:13:13.080 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:13:13.291 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:13:13.177 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:13:13.069 00:00:00.031 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:13:13.155 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:09:53.979 00:05:01.542 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 20:09:53.890 00:05:01.571 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 20:09:02.583 00:05:52.859 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 20:10:23.303 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-05 20:11:55.440 00:05:58.562 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 20:13:55.521 00:05:06.872 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 20:18:13.044 00:00:00.030 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:18:13.376 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:18:13.587 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:18:13.461 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:18:13.131 00:00:00.029 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:18:13.124 00:00:00.031 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:14:02.564 00:05:52.919 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 20:14:53.915 00:05:01.528 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 20:14:52.723 00:05:02.720 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 20:14:02.413 00:05:53.030 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 20:15:53.980 00:05:01.542 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 20:15:53.894 00:05:01.568 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 20:15:43.308 00:05:10.468 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2628 1 2025-11-05 20:15:02.583 00:05:52.860 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 20:17:55.441 00:05:58.566 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 20:23:13.507 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:23:13.339 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:23:13.301 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:23:13.419 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:23:13.338 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:23:13.296 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:19:55.522 00:05:06.872 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 20:20:02.563 00:05:52.921 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 20:20:02.413 00:05:53.030 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 20:20:53.922 00:05:01.521 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 20:20:52.725 00:05:02.718 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 20:21:03.319 00:05:10.022 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2848 1 2025-11-05 20:21:02.583 00:05:52.860 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 20:21:53.985 00:05:01.538 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 20:21:53.902 00:05:01.561 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 20:28:13.370 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:28:13.577 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:28:13.500 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:28:13.380 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:28:13.290 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:28:13.366 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:23:55.444 00:05:58.581 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 20:25:55.523 00:05:06.872 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 20:26:23.330 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-05 20:26:02.413 00:05:53.033 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 20:26:53.923 00:05:01.523 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 20:26:52.727 00:05:02.719 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 20:26:02.565 00:05:52.923 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 20:27:02.584 00:05:52.863 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 20:27:54.005 00:05:01.523 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 20:27:53.904 00:05:01.563 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 20:33:13.731 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:33:13.642 00:00:00.029 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:33:13.853 00:00:00.029 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:33:13.848 00:00:00.030 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:33:13.526 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:33:13.812 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:29:55.446 00:05:58.582 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 20:31:43.337 00:05:10.016 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-05 20:31:55.528 00:05:06.869 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 20:32:02.415 00:05:53.035 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 20:32:53.926 00:05:01.524 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 20:32:52.730 00:05:02.720 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 20:32:02.566 00:05:52.925 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 20:33:02.586 00:05:52.865 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 20:33:54.007 00:05:01.524 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 20:33:53.907 00:05:01.563 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 20:38:13.803 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:38:13.743 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:38:13.953 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:38:13.952 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:38:13.764 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:38:13.883 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:35:55.451 00:05:58.578 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 20:37:03.353 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-05 20:37:55.531 00:05:06.867 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 20:38:02.415 00:05:53.036 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 20:38:53.926 00:05:01.525 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 20:38:52.733 00:05:02.717 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 20:38:02.567 00:05:52.924 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 20:43:13.797 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:43:13.759 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:43:14.009 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:43:13.867 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:43:13.842 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:43:13.839 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:39:54.007 00:05:01.524 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 20:39:53.906 00:05:01.565 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 20:39:02.588 00:05:52.863 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 20:42:23.360 00:05:10.001 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2640 1 2025-11-05 20:41:55.451 00:05:58.578 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 20:43:55.531 00:05:06.867 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 20:48:13.884 00:00:00.028 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:48:14.025 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:48:13.903 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:48:13.899 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:48:13.817 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:48:13.672 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:44:02.571 00:05:52.922 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 20:44:02.417 00:05:53.036 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 20:44:53.933 00:05:01.520 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 20:44:52.735 00:05:02.718 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 20:45:02.591 00:05:52.861 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 20:45:54.008 00:05:01.524 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 20:45:53.912 00:05:01.559 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 20:47:43.362 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2580 1 2025-11-05 20:47:55.451 00:05:58.578 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-05 20:53:13.796 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:53:13.690 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:53:13.892 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:53:13.878 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:53:13.901 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:53:14.129 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:49:55.533 00:05:06.866 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-05 20:50:02.419 00:05:53.035 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-05 20:50:53.934 00:05:01.520 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-05 20:50:52.738 00:05:02.716 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-05 20:50:02.572 00:05:52.921 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-05 20:51:53.914 00:05:01.560 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-05 20:51:54.010 00:05:01.524 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-05 20:51:02.593 00:05:52.861 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-05 20:53:03.371 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2484 1 2025-11-05 20:58:13.947 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 20:58:13.949 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-05 20:58:14.160 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:58:14.160 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:58:13.860 00:00:00.031 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-05 20:58:14.029 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 Summary: total flows: 173, total bytes: 112304, total packets: 1693, avg bps: 232, avg pps: 0, avg bpp: 66 Time window: 2025-11-05 19:53:55 - 2025-11-05 20:58:14 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0054s User: 0.0009s Wall: 0.0021s flows/second: 83615.4 Runtime: 0.0021s