Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 13:54:00.817 00:05:58.189 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 13:55:00.816 00:05:57.328 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 13:55:08.016 00:05:52.805 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 13:56:58.993 00:05:01.829 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 13:57:58.984 00:05:01.920 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 13:57:58.972 00:05:01.870 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 13:58:08.015 00:05:52.807 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 13:59:00.861 00:05:07.137 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 13:59:04.857 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2388 1 2025-11-16 14:03:23.282 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:03:23.125 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:03:23.145 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:03:23.352 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:03:23.272 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:03:23.072 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:00:00.901 00:05:07.096 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 14:00:00.820 00:05:58.187 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 14:01:00.820 00:05:57.324 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 14:01:08.017 00:05:52.806 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 14:02:58.994 00:05:01.830 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 14:03:58.985 00:05:01.920 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 14:03:58.974 00:05:01.870 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 14:08:23.576 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:08:23.415 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:08:23.845 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:08:23.751 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:08:23.334 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:08:23.634 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:04:24.866 00:05:00.490 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2612 1 2025-11-16 14:04:08.018 00:05:52.807 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 14:05:00.863 00:05:07.139 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 14:06:00.905 00:05:07.094 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 14:06:00.823 00:05:58.186 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 14:07:00.824 00:05:57.322 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 14:07:08.022 00:05:52.805 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 14:08:58.997 00:05:01.830 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 14:13:23.715 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:13:23.489 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:13:23.272 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:13:23.622 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:13:23.411 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:13:23.192 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:09:34.869 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2584 1 2025-11-16 14:09:58.987 00:05:01.920 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 14:09:58.977 00:05:01.870 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 14:10:08.018 00:05:52.809 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 14:11:00.867 00:05:07.138 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 14:12:00.907 00:05:07.093 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 14:12:00.826 00:05:58.183 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 14:13:00.827 00:05:57.325 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 14:13:08.023 00:05:52.804 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 14:18:23.585 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:18:23.515 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:18:23.795 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:18:23.950 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:18:23.665 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:18:23.595 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:14:58.999 00:05:00.002 TCP 27.156.0.1:35159 -> 27.154.0.1:179 11 667 1 2025-11-16 14:14:54.872 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-16 14:15:58.987 00:05:01.920 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 14:15:58.978 00:05:01.869 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 14:16:08.020 00:05:52.808 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 14:17:00.867 00:05:07.144 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 14:18:00.908 00:05:07.093 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 14:18:00.827 00:06:00.001 TCP 27.156.0.1:179 -> 27.158.0.1:40177 13 809 1 2025-11-16 14:23:23.774 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:23:23.599 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:23:23.652 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:23:23.831 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:23:23.572 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:23:23.622 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:19:00.828 00:05:57.326 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 14:19:08.030 00:05:52.799 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 14:20:14.878 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2704 1 2025-11-16 14:20:00.827 00:05:58.176 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 14:21:58.990 00:05:01.919 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 14:21:58.981 00:05:01.868 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 14:22:08.021 00:05:52.809 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 14:23:00.867 00:05:07.153 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 14:24:00.908 00:05:07.097 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 14:28:23.870 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:28:23.859 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:28:24.071 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:28:24.022 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:28:23.945 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:28:23.952 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:24:59.012 00:05:01.818 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 14:25:34.883 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2404 1 2025-11-16 14:25:00.828 00:05:57.325 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 14:25:08.063 00:05:52.767 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 14:26:00.829 00:05:58.176 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 14:27:58.993 00:05:01.918 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 14:27:58.983 00:05:01.868 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 14:28:08.026 00:05:52.806 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 14:29:00.869 00:05:07.154 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 14:33:23.868 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:33:23.971 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:33:24.182 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:33:23.825 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:33:23.963 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:33:23.949 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:30:00.910 00:05:07.096 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 14:30:59.014 00:05:01.818 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 14:30:54.885 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2552 1 2025-11-16 14:31:00.829 00:05:57.335 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 14:31:08.040 00:05:52.790 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 14:32:00.831 00:05:58.176 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 14:33:58.994 00:05:01.918 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 14:33:58.984 00:05:01.868 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 14:38:23.947 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:38:23.949 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:38:23.911 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:38:23.916 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:38:23.835 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:38:23.736 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:34:08.026 00:05:52.807 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 14:35:00.871 00:05:07.152 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 14:36:00.911 00:05:07.114 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 14:36:14.895 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2632 1 2025-11-16 14:36:59.015 00:05:01.821 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 14:37:00.831 00:05:57.334 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 14:37:08.043 00:05:52.793 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 14:38:00.831 00:05:58.177 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 14:43:24.209 00:00:00.051 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:43:24.131 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:43:24.085 00:00:00.056 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:43:24.078 00:00:00.032 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:43:23.997 00:00:00.033 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:43:23.998 00:00:00.051 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:39:58.997 00:05:01.921 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 14:39:58.986 00:05:01.872 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 14:40:08.032 00:05:52.806 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 14:41:00.877 00:05:07.190 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 14:41:34.901 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-16 14:42:00.916 00:05:07.093 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 14:42:59.019 00:05:01.820 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 14:43:00.836 00:05:57.329 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 14:43:08.080 00:05:52.759 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 14:48:24.187 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:48:24.127 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:48:24.345 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:48:24.165 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:48:24.311 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:48:24.268 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:44:00.837 00:05:58.171 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-16 14:45:58.998 00:05:00.003 TCP 27.158.0.1:40177 -> 27.156.0.1:179 11 686 1 2025-11-16 14:45:58.986 00:05:01.873 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 14:46:08.029 00:05:52.810 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 14:46:54.913 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2416 1 2025-11-16 14:47:00.879 00:05:07.189 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 14:48:00.919 00:05:07.091 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 14:48:59.019 00:05:01.821 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-16 14:53:24.302 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:53:24.370 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:53:24.324 00:00:00.030 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:53:24.246 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:53:24.166 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:53:24.092 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-16 14:49:00.839 00:05:57.328 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-16 14:49:08.085 00:05:52.756 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-16 14:50:00.840 00:06:00.000 TCP 27.156.0.1:35159 -> 27.154.0.1:179 13 809 1 2025-11-16 14:51:00.920 00:05:58.082 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-16 14:51:58.991 00:05:01.870 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-16 14:52:14.915 00:05:10.019 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2608 1 2025-11-16 14:52:08.029 00:05:52.812 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-16 14:53:00.881 00:05:07.189 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-16 14:54:00.920 00:05:07.092 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-16 14:58:24.413 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:58:24.560 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:58:24.430 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:58:24.370 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-16 14:58:24.289 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 14:58:24.202 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112123, total packets: 1692, avg bps: 229, avg pps: 0, avg bpp: 66 Time window: 2025-11-16 13:54:00 - 2025-11-16 14:59:08 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0055s User: 0.0009s Wall: 0.0027s flows/second: 63605.8 Runtime: 0.0027s