Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 15:54:06.329 00:05:53.131 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 15:54:57.596 00:05:01.783 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 15:55:56.389 00:05:02.992 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 15:55:59.378 00:05:06.997 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 15:56:57.624 00:05:01.756 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 16:01:59.326 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.077 00:00:00.027 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:01:58.951 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.264 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.184 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:01:59.116 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 15:57:57.577 00:05:01.884 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 15:57:57.604 00:05:01.797 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 15:57:58.917 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2436 1 2025-11-13 15:58:59.379 00:05:06.974 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 15:59:06.355 00:05:53.066 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 16:00:57.601 00:05:01.781 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 16:00:06.330 00:05:53.132 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 16:01:56.389 00:05:02.997 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 16:01:59.381 00:05:06.997 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 16:06:58.793 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:02:57.631 00:05:01.757 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 16:06:59.485 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:06:59.695 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.693 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:06:58.874 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:06:59.990 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:03:18.928 00:05:10.199 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2564 1 2025-11-13 16:03:57.612 00:05:01.796 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 16:03:57.578 00:05:01.890 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 16:04:59.380 00:05:06.988 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 16:05:06.356 00:05:53.072 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 16:06:06.334 00:05:53.135 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 16:06:57.599 00:05:01.790 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 16:11:59.279 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.252 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.399 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.115 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:11:59.034 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:07:56.394 00:05:02.994 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 16:11:59.068 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:07:59.388 00:05:06.991 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 16:08:38.934 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-13 16:08:57.633 00:05:01.755 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 16:09:57.581 00:05:01.888 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 16:09:57.613 00:05:01.796 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 16:10:59.389 00:05:06.982 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 16:11:06.358 00:05:53.071 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 16:16:59.583 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.583 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.330 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.420 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.339 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:12:57.602 00:05:01.786 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 16:16:59.372 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:12:06.351 00:05:53.118 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 16:13:56.395 00:05:02.994 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 16:13:59.389 00:05:06.991 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 16:13:58.939 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-13 16:14:57.635 00:05:01.754 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 16:15:57.583 00:05:01.888 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 16:15:57.615 00:05:01.802 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 16:16:59.389 00:05:06.986 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 16:21:59.379 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:21:59.475 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:21:59.686 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.414 00:00:00.012 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.516 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:21:59.459 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:17:06.359 00:05:53.072 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 16:18:06.351 00:05:53.120 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 16:18:57.604 00:05:01.787 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 16:19:18.944 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-13 16:19:56.396 00:05:02.997 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 16:19:59.389 00:05:06.992 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 16:20:57.636 00:05:01.757 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 16:21:57.586 00:05:01.887 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 16:21:57.617 00:05:01.796 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 16:26:59.345 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:26:59.555 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:26:59.555 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.755 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.426 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:26:59.634 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:22:59.391 00:05:06.984 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 16:23:06.361 00:05:53.073 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 16:24:38.954 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2432 1 2025-11-13 16:24:57.605 00:05:01.788 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 16:24:06.354 00:05:53.119 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 16:25:56.396 00:05:02.996 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 16:25:59.395 00:05:06.988 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 16:26:57.639 00:05:01.754 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 16:31:59.701 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.678 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.659 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.665 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:31:59.585 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:31:59.491 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:27:57.585 00:05:01.888 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 16:27:57.620 00:05:01.793 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 16:28:59.393 00:05:06.986 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 16:29:06.361 00:05:53.075 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 16:29:58.958 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2616 1 2025-11-13 16:30:57.608 00:05:01.789 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 16:30:06.355 00:05:53.120 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 16:31:56.400 00:05:02.997 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 16:31:59.392 00:05:06.989 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 16:36:59.881 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.870 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.678 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:36:59.867 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:32:57.642 00:05:01.757 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 16:36:59.671 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:36:59.787 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:33:57.586 00:05:01.890 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 16:33:57.621 00:05:01.795 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 16:34:59.396 00:05:06.984 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 16:35:18.962 00:05:00.560 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2444 1 2025-11-13 16:35:06.361 00:05:53.078 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 16:36:06.358 00:05:53.123 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 16:36:57.607 00:05:01.792 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 16:37:56.402 00:05:02.998 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 16:42:00.006 00:00:00.038 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:42:00.536 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:42:00.747 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.320 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.171 00:00:00.026 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:42:00.085 00:00:00.039 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:37:59.399 00:05:06.987 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 16:38:57.643 00:05:01.757 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 16:39:57.588 00:05:01.893 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 16:39:57.627 00:05:01.794 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 16:40:28.969 00:05:10.044 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2520 1 2025-11-13 16:40:59.399 00:05:06.981 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 16:41:06.365 00:05:53.075 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 16:46:59.945 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:42:57.610 00:05:01.794 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 16:46:59.975 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:47:00.198 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:47:00.268 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:42:06.360 00:05:53.123 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 16:47:00.025 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:46:59.987 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:43:56.404 00:05:02.998 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 16:43:59.399 00:05:06.989 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 16:44:57.648 00:05:01.754 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 16:45:57.589 00:05:01.893 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 16:45:57.629 00:05:01.793 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 16:45:48.980 00:05:10.015 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2496 1 2025-11-13 16:46:59.400 00:05:06.981 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 16:51:59.946 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:51:59.943 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:51:59.902 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.155 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:52:00.156 00:00:00.019 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:47:06.368 00:05:53.074 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-13 16:52:00.023 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:48:06.360 00:05:53.123 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-13 16:48:57.609 00:05:01.794 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-13 16:49:56.405 00:05:03.001 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-13 16:49:59.402 00:05:06.989 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-13 16:50:57.651 00:05:01.755 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-13 16:51:08.986 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2512 1 2025-11-13 16:51:57.591 00:05:01.896 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-13 16:51:57.632 00:05:01.794 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-13 16:56:59.924 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 16:57:00.282 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.282 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.279 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.004 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-13 16:57:00.072 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-13 16:52:59.403 00:05:06.984 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-13 16:53:06.370 00:05:53.076 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 Summary: total flows: 173, total bytes: 112128, total packets: 1693, avg bps: 230, avg pps: 0, avg bpp: 66 Time window: 2025-11-13 15:54:06 - 2025-11-13 16:58:59 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0022s User: 0.0032s Wall: 0.0023s flows/second: 76276.1 Runtime: 0.0023s