Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 05:54:58.863 00:05:01.772 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 05:55:07.789 00:05:52.847 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 05:55:57.854 00:05:02.782 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 05:56:58.850 00:05:01.785 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 05:57:58.845 00:05:01.871 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 05:57:58.830 00:05:01.826 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 05:58:07.813 00:05:52.823 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 05:59:00.675 00:05:07.101 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 06:03:14.105 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:03:14.240 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:03:14.323 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:03:14.188 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:03:14.453 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:03:14.460 00:00:00.027 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 05:59:44.229 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 3020 1 2025-11-16 06:00:00.715 00:05:07.088 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 06:00:58.866 00:05:01.771 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 06:01:07.793 00:05:52.843 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 06:01:57.854 00:05:02.782 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 06:02:58.852 00:05:01.785 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 06:03:58.846 00:05:01.871 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 06:03:58.831 00:05:01.825 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 06:08:13.732 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:08:13.758 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:08:13.968 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:08:13.951 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:08:13.883 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:08:13.811 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:04:07.824 00:05:52.813 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 06:05:00.678 00:05:07.100 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 06:05:04.238 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-16 06:06:00.717 00:05:07.089 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 06:06:58.866 00:05:01.770 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 06:07:07.797 00:05:52.841 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 06:07:57.856 00:05:02.781 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 06:08:58.853 00:05:01.785 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 06:13:13.818 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:13:13.632 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:13:14.027 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:13:14.105 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:13:14.028 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:13:13.711 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:09:58.848 00:05:01.871 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 06:09:58.833 00:05:01.826 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 06:10:24.245 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-16 06:10:07.826 00:05:52.814 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 06:11:00.678 00:05:07.102 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 06:12:00.717 00:05:07.090 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 06:12:58.868 00:05:01.772 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 06:13:07.798 00:05:52.841 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 06:13:57.857 00:05:02.782 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 06:18:14.197 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:18:14.191 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:18:14.017 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:18:14.139 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:18:14.058 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:18:13.987 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:14:58.854 00:05:01.787 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 06:15:44.257 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-16 06:15:58.834 00:05:01.828 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 06:15:58.849 00:05:01.873 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 06:16:07.830 00:05:52.812 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 06:17:00.679 00:05:07.100 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 06:18:00.721 00:05:07.088 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 06:18:58.870 00:05:01.772 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 06:23:14.326 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:23:14.239 00:00:00.028 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:23:13.993 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:23:14.332 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:23:14.252 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:23:14.116 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:19:07.799 00:05:52.842 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 06:19:57.876 00:05:02.765 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 06:20:58.856 00:05:01.786 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 06:21:04.258 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2504 1 2025-11-16 06:21:58.848 00:05:01.876 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 06:21:58.835 00:05:01.829 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 06:22:07.829 00:05:52.815 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 06:23:00.682 00:05:07.099 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 06:24:00.721 00:05:07.087 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 06:28:14.287 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:28:14.286 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:28:14.368 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:28:14.498 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:28:14.501 00:00:00.016 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:28:14.377 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:24:58.868 00:05:01.777 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 06:25:07.800 00:05:52.845 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 06:25:57.877 00:05:02.768 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 06:26:24.264 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2696 1 2025-11-16 06:26:58.858 00:05:01.789 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 06:27:58.849 00:05:01.876 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 06:27:58.836 00:05:01.829 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 06:28:07.828 00:05:52.817 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 06:33:14.248 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:33:13.927 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:29:00.685 00:05:07.097 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 06:33:14.138 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:33:14.139 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:33:14.382 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:33:14.329 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:30:00.725 00:05:07.085 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 06:30:58.870 00:05:01.777 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 06:31:34.909 00:05:09.364 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2436 1 2025-11-16 06:31:07.801 00:05:52.845 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 06:31:57.880 00:05:02.766 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 06:32:58.859 00:05:01.788 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 06:33:58.853 00:05:01.875 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 06:33:58.840 00:05:01.828 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 06:38:14.572 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.696 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.383 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.378 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.297 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:38:14.362 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:34:07.830 00:05:52.817 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 06:35:00.686 00:05:07.097 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 06:36:00.727 00:05:07.083 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 06:36:54.274 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-16 06:36:58.878 00:05:01.770 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 06:37:07.803 00:05:52.845 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 06:37:57.887 00:05:02.761 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 06:38:58.862 00:05:01.786 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 06:43:14.647 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:43:14.594 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:43:14.804 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:43:14.734 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:43:14.615 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:43:14.727 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:39:58.844 00:05:01.829 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 06:39:58.861 00:05:01.873 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 06:40:07.836 00:05:52.815 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 06:41:00.687 00:05:07.097 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 06:42:00.728 00:05:07.084 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 06:42:05.071 00:05:09.223 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2700 1 2025-11-16 06:42:58.879 00:05:01.772 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 06:43:07.804 00:05:52.847 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 06:43:57.888 00:05:02.763 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 06:48:14.997 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:48:15.087 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:48:15.297 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:48:15.290 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:48:15.083 00:00:00.026 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:48:15.078 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:44:58.863 00:05:01.789 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 06:45:58.861 00:05:01.871 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 06:45:58.844 00:05:01.828 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 06:46:07.831 00:05:52.820 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 06:47:00.691 00:05:07.098 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 06:47:24.294 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-16 06:48:00.732 00:05:07.082 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 06:48:58.881 00:05:01.771 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 06:53:14.947 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:53:14.589 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:53:14.857 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:53:14.809 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:53:14.776 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:53:14.598 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:49:57.891 00:05:02.762 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 06:49:07.806 00:05:52.847 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 06:50:58.866 00:05:01.787 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 06:51:58.861 00:05:01.871 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 06:51:58.845 00:05:01.827 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 06:52:44.299 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2540 1 2025-11-16 06:52:07.834 00:05:52.819 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 06:53:00.692 00:05:07.098 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 06:54:00.732 00:05:07.083 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 06:58:14.897 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:58:14.756 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:58:14.804 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 06:58:14.815 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:58:14.774 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 06:58:14.984 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 Summary: total flows: 173, total bytes: 112508, total packets: 1693, avg bps: 233, avg pps: 0, avg bpp: 66 Time window: 2025-11-16 05:54:58 - 2025-11-16 06:59:07 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0040s User: 0.0010s Wall: 0.0022s flows/second: 79834.4 Runtime: 0.0022s