Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 00:54:09.875 00:05:52.530 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:55:00.530 00:05:01.875 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 00:55:00.672 00:05:01.733 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:00:03.420 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:00:03.360 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:00:03.073 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:00:03.241 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:00:03.162 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:00:03.211 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:57:00.717 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 00:58:00.654 00:05:01.832 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:58:00.696 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 00:57:09.856 00:05:52.590 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 00:58:09.826 00:05:52.581 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 00:58:51.852 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2608 1 2025-11-20 00:59:09.806 00:05:52.681 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 01:05:03.401 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:05:03.452 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:05:03.337 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:05:03.379 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:00:09.879 00:05:52.529 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 01:05:03.300 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:01:00.545 00:05:01.863 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:01:00.675 00:05:01.733 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:05:03.192 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:03:00.715 00:05:01.692 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:04:00.653 00:05:01.834 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:04:00.697 00:05:01.729 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:03:09.859 00:05:52.587 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:04:11.860 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-20 01:04:09.830 00:05:52.580 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:10:03.197 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:10:03.412 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:10:03.077 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:05:09.809 00:05:52.680 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 01:10:03.296 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:10:03.216 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:10:02.986 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:06:09.881 00:05:52.529 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 01:07:00.570 00:05:01.840 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:07:00.677 00:05:01.733 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:09:00.720 00:05:01.691 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:09:31.863 00:05:10.001 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-20 01:10:00.657 00:05:01.833 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:10:00.702 00:05:01.728 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:09:09.861 00:05:52.589 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:15:03.933 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:15:03.700 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:15:03.732 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:15:03.566 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:15:03.486 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:10:09.830 00:05:52.581 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:15:03.722 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:11:09.810 00:05:52.681 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 01:12:09.883 00:05:52.529 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 01:13:00.571 00:05:01.841 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:13:00.679 00:05:01.733 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:14:51.864 00:05:00.411 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2332 1 2025-11-20 01:15:00.720 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:20:03.811 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:20:03.760 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:16:00.658 00:05:01.833 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:20:03.970 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:20:03.964 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:16:00.701 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:20:03.898 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:15:09.862 00:05:52.589 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:20:03.891 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:16:09.833 00:05:52.578 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:17:09.813 00:05:52.679 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 01:18:09.882 00:05:52.529 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 01:19:00.570 00:05:01.841 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:19:00.678 00:05:01.733 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:20:01.868 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-20 01:25:03.795 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:25:03.697 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:21:00.721 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:25:04.007 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:25:03.903 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:25:03.641 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:25:03.777 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:22:00.659 00:05:01.833 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:22:00.701 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:21:09.863 00:05:52.588 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:22:09.834 00:05:52.578 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:23:09.814 00:05:52.677 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 01:24:09.886 00:05:52.527 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 01:25:00.573 00:05:01.840 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:25:00.681 00:05:01.732 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:25:21.881 00:05:10.001 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2304 1 2025-11-20 01:30:04.145 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:30:04.001 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:30:03.935 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:30:03.874 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:30:03.793 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:30:03.934 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:27:00.723 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:28:00.665 00:05:01.828 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:28:00.706 00:05:01.727 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:27:09.866 00:05:52.587 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:28:09.835 00:05:52.577 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:29:09.816 00:05:52.677 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 01:30:41.881 00:05:00.594 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2684 1 2025-11-20 01:35:04.071 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:35:04.007 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:35:04.055 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:35:04.007 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:30:09.886 00:05:52.526 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 01:35:03.926 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:31:00.576 00:05:01.836 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:31:00.682 00:05:01.730 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:35:03.860 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:33:00.728 00:05:01.685 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:34:00.663 00:05:01.830 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:34:00.707 00:05:01.725 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:33:09.866 00:05:52.587 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:34:09.837 00:05:52.575 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:40:04.085 00:00:00.026 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:40:04.008 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:40:03.806 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:35:09.819 00:05:52.674 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 01:40:03.886 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:40:03.806 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:35:51.882 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-20 01:40:03.875 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:37:00.576 00:05:01.836 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:37:00.684 00:05:01.728 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:36:09.888 00:05:52.524 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 01:39:00.728 00:05:01.685 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:40:00.663 00:05:01.831 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:40:00.709 00:05:01.724 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:39:09.868 00:05:52.585 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:45:04.260 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:45:03.864 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:45:04.102 00:00:00.038 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:45:03.992 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:45:04.022 00:00:00.038 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:40:09.840 00:05:52.574 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:45:03.782 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:41:11.888 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 01:41:09.820 00:05:52.674 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 01:42:09.888 00:05:52.527 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 01:43:00.578 00:05:01.836 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:43:00.683 00:05:01.732 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:45:00.730 00:05:01.685 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:46:00.665 00:05:01.830 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:50:04.310 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:50:03.975 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:46:00.710 00:05:01.724 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:50:03.855 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:45:09.869 00:05:52.585 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:50:04.232 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:50:04.152 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:50:04.100 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:46:31.893 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2808 1 2025-11-20 01:46:09.840 00:05:52.574 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:47:09.820 00:05:52.675 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 01:49:00.580 00:05:01.840 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:49:00.685 00:05:01.735 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:48:09.891 00:05:52.529 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 01:55:04.449 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:55:04.440 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:55:04.230 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:55:04.393 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:51:00.732 00:05:01.685 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:55:04.239 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 01:55:04.313 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:52:00.665 00:05:01.833 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:52:00.713 00:05:01.725 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:51:09.870 00:05:52.588 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:51:51.900 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2368 1 2025-11-20 01:52:09.841 00:05:52.576 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:53:09.822 00:05:52.676 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112116, total packets: 1692, avg bps: 230, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 00:54:09 - 2025-11-20 01:59:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0037s User: 0.0028s Wall: 0.0034s flows/second: 51244.0 Runtime: 0.0034s