Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 00:54:58.296 00:05:01.809 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-15 00:55:07.136 00:05:52.968 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-15 00:55:57.094 00:05:03.010 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-15 00:56:58.325 00:05:01.780 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-15 00:57:58.278 00:05:01.907 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-15 00:57:58.304 00:05:01.821 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-15 01:02:38.989 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:02:38.983 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:02:39.044 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:02:39.102 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:02:38.904 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:02:38.834 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 00:58:07.105 00:05:53.001 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-15 00:59:00.146 00:05:06.978 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-15 00:59:21.716 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2648 1 2025-11-15 01:00:00.185 00:05:06.916 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-15 01:00:58.298 00:05:01.808 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-15 01:01:07.137 00:05:52.969 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-15 01:01:57.096 00:05:03.010 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-15 01:02:58.326 00:05:01.780 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-15 01:07:39.212 00:00:00.030 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:07:39.166 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:07:38.852 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:07:38.941 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:07:38.861 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:07:39.001 00:00:00.030 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:03:58.280 00:05:01.908 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-15 01:03:58.309 00:05:01.819 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-15 01:04:41.719 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-15 01:04:07.120 00:05:52.987 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-15 01:05:00.146 00:05:06.978 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-15 01:06:00.188 00:05:06.915 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-15 01:06:58.299 00:05:01.808 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-15 01:07:07.143 00:05:52.964 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-15 01:07:57.099 00:05:03.008 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-15 01:12:38.861 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:12:38.859 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:12:38.900 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:12:38.943 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:12:39.072 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:12:39.116 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:08:58.328 00:05:01.779 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-15 01:09:58.280 00:05:01.908 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-15 01:09:58.310 00:05:01.818 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-15 01:10:01.724 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-15 01:10:07.122 00:05:52.986 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-15 01:11:00.147 00:05:06.980 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-15 01:12:00.188 00:05:06.915 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-15 01:12:58.299 00:05:01.809 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-15 01:17:39.156 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:17:39.071 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:17:39.137 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:17:39.046 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:17:38.990 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:17:38.926 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:13:07.145 00:05:52.964 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-15 01:13:57.106 00:05:03.003 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-15 01:14:58.330 00:05:01.780 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-15 01:15:21.731 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2448 1 2025-11-15 01:15:58.280 00:05:01.909 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-15 01:15:58.310 00:05:01.819 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-15 01:16:07.124 00:05:52.985 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-15 01:17:00.148 00:05:06.981 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-15 01:18:00.189 00:05:06.917 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-15 01:22:39.154 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:22:39.364 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:22:39.241 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:22:39.177 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:22:39.095 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:22:38.942 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:18:58.302 00:05:01.808 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-15 01:19:07.148 00:05:52.963 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-15 01:19:57.107 00:05:03.003 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-15 01:20:41.738 00:05:00.449 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2480 1 2025-11-15 01:20:58.334 00:05:01.777 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-15 01:21:58.283 00:05:01.908 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-15 01:21:58.313 00:05:01.818 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-15 01:22:07.127 00:05:52.985 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-15 01:23:00.150 00:05:06.980 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-15 01:27:39.804 00:00:00.026 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:27:39.700 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:27:39.824 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:27:39.643 00:00:00.030 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:27:39.570 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:27:39.564 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:24:00.190 00:05:06.917 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-15 01:24:58.303 00:05:01.810 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-15 01:25:07.151 00:05:52.962 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-15 01:25:57.110 00:05:03.003 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-15 01:25:51.747 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2536 1 2025-11-15 01:26:58.334 00:05:01.778 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-15 01:27:58.315 00:05:01.818 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-15 01:27:58.285 00:05:01.911 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-15 01:32:39.736 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:32:39.609 00:00:00.030 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:32:39.528 00:00:00.030 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:32:39.525 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:32:40.199 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:32:40.247 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:28:07.126 00:05:52.986 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-15 01:29:00.151 00:05:06.979 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-15 01:30:00.192 00:05:06.918 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-15 01:30:58.305 00:05:01.810 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-15 01:31:11.753 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2440 1 2025-11-15 01:31:07.151 00:05:52.963 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-15 01:31:57.111 00:05:03.003 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-15 01:32:58.335 00:05:01.779 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-15 01:37:39.593 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:37:39.588 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:37:39.470 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:37:39.461 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:37:39.380 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:37:39.382 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:33:58.284 00:05:01.911 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-15 01:33:58.315 00:05:01.819 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-15 01:34:07.128 00:05:52.989 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-15 01:35:00.152 00:05:06.981 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-15 01:36:00.194 00:05:06.914 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-15 01:36:31.760 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-15 01:36:58.305 00:05:01.812 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-15 01:37:07.152 00:05:52.964 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-15 01:37:57.111 00:05:03.005 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-15 01:42:39.572 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:42:39.525 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:42:39.735 00:00:00.030 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:42:39.785 00:00:00.011 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:42:39.539 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:42:39.652 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:38:58.337 00:05:01.780 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-15 01:39:58.286 00:05:01.911 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-15 01:39:58.316 00:05:01.821 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-15 01:40:07.130 00:05:52.989 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-15 01:41:00.156 00:05:06.986 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-15 01:41:51.769 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-15 01:42:00.198 00:05:06.915 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-15 01:42:58.309 00:05:01.810 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-15 01:47:40.017 00:00:00.043 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:47:40.017 00:00:00.035 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:47:40.395 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:47:40.029 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:47:40.097 00:00:00.044 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:47:40.226 00:00:00.037 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:43:07.154 00:05:52.964 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-15 01:43:57.145 00:05:02.973 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-15 01:44:58.336 00:05:01.782 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-15 01:45:58.288 00:05:01.910 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-15 01:45:58.317 00:05:01.821 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-15 01:46:07.133 00:05:52.986 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-15 01:47:00.159 00:05:06.983 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-15 01:47:11.780 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2432 1 2025-11-15 01:48:00.197 00:05:06.920 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-15 01:52:39.689 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:52:39.786 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:52:39.769 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:52:40.052 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:52:39.997 00:00:00.026 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:52:40.084 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:48:58.309 00:05:01.810 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-15 01:49:07.162 00:05:52.958 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-15 01:49:57.140 00:05:02.980 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-15 01:50:58.338 00:05:01.781 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-15 01:51:58.318 00:05:01.822 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-15 01:51:58.289 00:05:01.911 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-15 01:52:31.786 00:05:00.882 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2768 1 2025-11-15 01:52:07.138 00:05:52.982 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-15 01:53:00.161 00:05:06.982 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-15 01:57:39.892 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:57:39.846 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:57:39.831 00:00:00.031 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:57:39.751 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 01:57:39.683 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-15 01:57:40.118 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-15 01:54:00.200 00:05:06.919 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112300, total packets: 1693, avg bps: 233, avg pps: 0, avg bpp: 66 Time window: 2025-11-15 00:54:58 - 2025-11-15 01:59:07 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0035s User: 0.0018s Wall: 0.0026s flows/second: 67499.0 Runtime: 0.0026s