Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 03:54:06.025 00:05:53.180 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 03:54:57.371 00:05:01.754 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 03:55:56.157 00:05:02.969 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 03:55:59.125 00:05:07.016 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 03:56:57.367 00:05:01.760 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 04:01:44.693 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:01:44.883 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:01:44.718 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:01:44.647 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:01:44.567 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:01:44.483 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 03:57:57.352 00:05:01.854 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 03:57:57.346 00:05:01.799 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 03:58:59.125 00:05:06.929 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 03:59:17.968 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-13 03:59:06.117 00:05:53.051 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 04:00:06.031 00:05:53.177 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 04:00:57.374 00:05:01.755 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 04:01:56.158 00:05:02.969 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 04:01:59.125 00:05:07.016 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 04:06:44.776 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:06:44.986 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:06:45.144 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:06:45.161 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:06:45.222 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:06:45.143 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:02:57.375 00:05:01.752 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 04:03:57.355 00:05:01.855 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 04:03:57.357 00:05:01.793 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 04:04:37.977 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2840 1 2025-11-13 04:04:59.128 00:05:06.927 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 04:05:06.121 00:05:53.048 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 04:06:57.374 00:05:01.755 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 04:06:06.034 00:05:53.175 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 04:11:44.919 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:11:44.946 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:11:44.776 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:11:44.987 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:11:44.984 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:11:45.028 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:07:56.159 00:05:02.970 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 04:07:59.128 00:05:07.017 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 04:08:57.378 00:05:01.751 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 04:09:57.354 00:05:01.856 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 04:09:57.358 00:05:01.791 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 04:09:57.979 00:05:10.887 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-13 04:10:59.128 00:05:06.931 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 04:11:06.124 00:05:53.047 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 04:16:44.903 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:16:44.901 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:16:45.112 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:16:45.053 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:16:45.072 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:16:44.983 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:12:06.036 00:05:53.176 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 04:12:57.374 00:05:01.757 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 04:13:56.160 00:05:02.971 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 04:13:59.130 00:05:07.017 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 04:14:57.380 00:05:01.752 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 04:15:17.984 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-13 04:15:57.361 00:05:01.850 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 04:15:57.359 00:05:01.792 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 04:16:59.133 00:05:06.928 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 04:21:44.921 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:21:45.066 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:21:44.907 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:21:45.136 00:00:00.018 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:21:45.019 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:21:45.147 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:17:06.125 00:05:53.048 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 04:18:57.375 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 04:18:06.040 00:05:53.173 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 04:19:56.164 00:05:02.969 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 04:19:59.131 00:05:07.015 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 04:20:37.987 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-13 04:20:57.380 00:05:01.754 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 04:21:57.355 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 04:21:57.360 00:05:01.793 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 04:26:45.130 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:26:45.250 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:26:45.459 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:26:45.400 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:26:45.214 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:26:45.209 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:22:59.132 00:05:06.930 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 04:23:06.126 00:05:53.048 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 04:24:06.041 00:05:53.174 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 04:24:57.377 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 04:25:56.165 00:05:02.970 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 04:25:59.134 00:05:07.022 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 04:25:57.979 00:05:10.017 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-13 04:26:57.382 00:05:01.757 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 04:31:45.187 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:31:45.188 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:31:45.400 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:31:45.310 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:31:45.057 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:31:45.268 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:27:57.357 00:05:01.862 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 04:27:57.362 00:05:01.797 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 04:28:59.136 00:05:06.930 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 04:29:06.135 00:05:53.044 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 04:30:57.379 00:05:01.760 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 04:30:06.044 00:05:53.176 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 04:31:17.994 00:05:00.013 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2636 1 2025-11-13 04:31:56.166 00:05:02.973 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 04:31:59.138 00:05:07.019 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 04:36:45.421 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:36:45.418 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:36:45.629 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:36:45.399 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:36:45.280 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:36:45.502 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:32:57.385 00:05:01.755 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 04:33:57.359 00:05:01.861 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 04:33:57.365 00:05:01.795 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 04:34:59.139 00:05:06.926 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 04:35:06.136 00:05:53.044 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 04:36:28.008 00:05:10.253 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2420 1 2025-11-13 04:36:06.044 00:05:53.176 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 04:36:57.380 00:05:01.760 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 04:41:45.799 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:41:45.723 00:00:00.010 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:41:45.387 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:41:45.669 00:00:00.019 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:41:45.584 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:41:45.585 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:37:56.168 00:05:02.972 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 04:37:59.139 00:05:07.018 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 04:38:57.385 00:05:01.757 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 04:39:57.365 00:05:01.798 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 04:39:57.361 00:05:01.862 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 04:40:59.140 00:05:06.925 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 04:41:06.137 00:05:53.045 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 04:41:48.011 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-13 04:46:45.562 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:46:45.565 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:46:45.777 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:46:45.692 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:46:45.721 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:46:45.645 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:42:57.381 00:05:01.762 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 04:42:06.046 00:05:53.178 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 04:43:56.171 00:05:02.971 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 04:43:59.142 00:05:07.017 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 04:44:57.386 00:05:01.758 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 04:45:57.362 00:05:01.862 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 04:45:57.366 00:05:01.797 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 04:46:59.142 00:05:06.925 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 04:47:08.013 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2600 1 2025-11-13 04:51:45.814 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:51:45.950 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:51:45.706 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:51:45.605 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:51:45.603 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:51:45.525 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:47:06.139 00:05:53.045 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 04:48:57.382 00:05:01.763 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 04:48:06.045 00:05:53.180 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 04:49:56.171 00:05:02.974 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 04:49:59.144 00:05:07.016 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 04:50:57.386 00:05:01.759 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 04:51:57.362 00:05:01.864 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 04:51:57.368 00:05:01.798 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 04:52:28.017 00:05:10.035 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-13 04:56:45.716 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 04:56:45.715 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 04:56:45.925 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:56:45.920 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:56:45.877 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:56:45.796 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 04:52:59.144 00:05:06.925 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 04:53:06.139 00:05:53.046 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 Summary: total flows: 173, total bytes: 112348, total packets: 1692, avg bps: 230, avg pps: 0, avg bpp: 66 Time window: 2025-11-13 03:54:06 - 2025-11-13 04:58:59 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0044s User: 0.0018s Wall: 0.0022s flows/second: 78777.0 Runtime: 0.0022s