Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 08:54:57.456 00:05:01.755 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 08:54:06.168 00:05:53.122 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 08:55:56.249 00:05:02.960 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 08:55:59.208 00:05:07.031 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 08:56:57.476 00:05:01.734 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 09:01:50.789 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.866 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.465 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.462 00:00:00.030 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.382 00:00:00.030 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:01:50.579 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 08:57:48.380 00:05:10.001 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-13 08:57:57.439 00:05:01.852 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 08:57:57.457 00:05:01.774 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 08:58:59.209 00:05:06.984 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 08:59:06.220 00:05:53.033 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 09:00:06.172 00:05:53.123 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 09:00:57.460 00:05:01.756 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 09:01:56.251 00:05:02.965 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 09:01:59.210 00:05:07.031 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 09:06:50.902 00:00:00.020 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:06:50.728 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:06:50.938 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:06:50.795 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:06:50.988 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:06:50.983 00:00:00.020 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:02:57.484 00:05:01.731 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 09:03:08.382 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2664 1 2025-11-13 09:03:57.439 00:05:01.856 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 09:03:57.463 00:05:01.772 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 09:04:59.213 00:05:06.984 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 09:05:06.222 00:05:53.035 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 09:06:57.460 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 09:06:06.173 00:05:53.124 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 09:11:50.934 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:11:50.767 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:11:50.978 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:11:50.872 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:11:51.014 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:11:51.016 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:07:56.250 00:05:02.967 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 09:07:59.215 00:05:07.029 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 09:08:28.384 00:05:10.724 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-13 09:08:57.485 00:05:01.732 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 09:09:57.465 00:05:01.774 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 09:09:57.441 00:05:01.858 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 09:10:59.216 00:05:06.985 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 09:11:06.223 00:05:53.035 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 09:16:50.854 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:16:50.853 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:16:51.064 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:16:50.872 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:16:50.937 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:16:50.935 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:12:06.177 00:05:53.122 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 09:12:57.463 00:05:01.755 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 09:13:56.258 00:05:02.961 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 09:13:48.389 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2600 1 2025-11-13 09:13:59.218 00:05:07.027 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 09:14:57.491 00:05:01.732 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 09:15:57.444 00:05:01.857 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 09:15:57.470 00:05:01.770 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 09:16:59.218 00:05:06.989 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 09:21:51.074 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:21:50.758 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:21:51.285 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:21:51.059 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:21:51.032 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:21:50.838 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:17:06.225 00:05:53.035 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 09:18:06.181 00:05:53.120 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 09:18:57.467 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 09:19:08.396 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2820 1 2025-11-13 09:19:56.258 00:05:02.961 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 09:19:59.222 00:05:07.025 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 09:20:57.492 00:05:01.728 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 09:21:57.447 00:05:01.854 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 09:21:57.472 00:05:01.769 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 09:26:50.942 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:26:51.072 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:26:51.284 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:26:51.274 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:26:51.159 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:26:51.023 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:22:59.219 00:05:06.988 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 09:23:06.226 00:05:53.034 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 09:24:28.402 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-13 09:24:57.467 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 09:24:06.187 00:05:53.114 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 09:25:56.263 00:05:02.958 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 09:25:59.219 00:05:07.030 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 09:26:57.493 00:05:01.729 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 09:31:51.251 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:31:51.252 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:31:51.332 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:31:51.461 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:31:51.281 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:31:51.244 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:27:57.449 00:05:01.853 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 09:27:57.474 00:05:01.768 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 09:28:59.220 00:05:06.991 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 09:29:06.229 00:05:53.032 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 09:29:48.406 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-13 09:30:06.190 00:05:53.112 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 09:30:57.469 00:05:01.752 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 09:31:56.263 00:05:02.961 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 09:31:59.221 00:05:07.031 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 09:36:51.221 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:36:51.326 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:36:51.536 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:36:51.634 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:36:51.309 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:36:51.300 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:32:57.495 00:05:01.728 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 09:33:57.450 00:05:01.853 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 09:33:57.473 00:05:01.769 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 09:34:59.221 00:05:07.004 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 09:35:08.409 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-13 09:35:06.232 00:05:53.031 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 09:36:57.471 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 09:36:06.205 00:05:53.098 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 09:41:51.669 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.545 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.638 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.538 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.458 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:41:51.458 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:37:56.265 00:05:02.958 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 09:37:59.222 00:05:07.037 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 09:38:57.495 00:05:01.729 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 09:39:57.452 00:05:01.853 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 09:39:57.476 00:05:01.769 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 09:40:28.419 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-13 09:40:59.222 00:05:07.003 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 09:41:06.239 00:05:53.026 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 09:46:51.598 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:46:51.522 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:46:51.732 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:46:51.663 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:46:51.755 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:46:51.680 00:00:00.020 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:42:06.205 00:05:53.100 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 09:42:57.471 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 09:43:56.267 00:05:02.958 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 09:43:59.224 00:05:07.035 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 09:44:57.497 00:05:01.727 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 09:45:48.429 00:05:10.266 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2620 1 2025-11-13 09:45:57.452 00:05:01.853 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 09:45:57.477 00:05:01.768 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 09:46:59.225 00:05:07.003 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 09:51:51.533 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:51:51.636 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:51:51.847 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:51:51.739 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:51:51.780 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:51:51.614 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:47:06.239 00:05:53.027 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 09:48:57.474 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 09:48:06.206 00:05:53.099 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 09:49:56.273 00:05:02.952 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 09:49:59.224 00:05:07.039 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 09:50:57.500 00:05:01.726 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 09:51:08.440 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2484 1 2025-11-13 09:51:57.456 00:05:01.852 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 09:51:57.482 00:05:01.766 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 09:56:51.979 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:56:51.902 00:00:00.029 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:56:51.900 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:56:51.849 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 09:56:51.769 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 09:56:51.769 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 09:52:59.225 00:05:07.003 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 09:53:06.241 00:05:53.027 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 Summary: total flows: 173, total bytes: 112464, total packets: 1694, avg bps: 231, avg pps: 0, avg bpp: 66 Time window: 2025-11-13 08:54:06 - 2025-11-13 09:58:59 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0033s User: 0.0022s Wall: 0.0022s flows/second: 79034.4 Runtime: 0.0022s