Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 01:54:09.891 00:05:52.527 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 01:55:00.580 00:05:01.838 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:55:00.684 00:05:01.734 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:00:04.413 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:00:04.357 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:00:04.568 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:00:04.654 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:00:04.370 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:00:04.494 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 01:57:00.734 00:05:01.685 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:57:11.905 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2608 1 2025-11-20 01:57:09.874 00:05:52.586 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:58:00.665 00:05:01.835 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:58:00.715 00:05:01.725 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:58:09.842 00:05:52.577 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:59:09.822 00:05:52.679 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:05:04.637 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:05:04.631 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:05:04.318 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:05:04.503 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:00:09.893 00:05:52.527 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:05:04.422 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:01:00.582 00:05:01.838 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:01:00.685 00:05:01.736 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:05:04.426 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:02:31.912 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-20 02:03:00.739 00:05:01.682 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:03:09.874 00:05:52.588 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:04:00.665 00:05:01.837 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:04:00.719 00:05:01.722 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:04:09.843 00:05:52.579 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:10:04.819 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:10:04.505 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:10:04.378 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:05:09.823 00:05:52.679 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:10:04.378 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:10:04.297 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:10:04.608 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:06:09.897 00:05:52.525 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:07:00.585 00:05:01.837 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:07:00.687 00:05:01.735 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:07:51.917 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 02:09:00.741 00:05:01.682 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:10:00.721 00:05:01.722 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:09:09.877 00:05:52.586 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:10:00.668 00:05:01.835 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:15:04.671 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:15:04.639 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:15:04.676 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:15:04.676 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:15:04.595 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:10:09.847 00:05:52.576 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:15:04.465 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:11:09.827 00:05:52.676 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:12:09.898 00:05:52.526 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:13:00.603 00:05:01.820 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:13:00.692 00:05:01.732 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:13:11.923 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2420 1 2025-11-20 02:15:00.740 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:15:09.878 00:05:52.586 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:20:04.694 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:16:00.672 00:05:01.832 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:20:04.729 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:20:04.818 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:16:00.723 00:05:01.721 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:20:04.702 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:20:04.613 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:20:04.518 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:16:09.850 00:05:52.575 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:17:09.830 00:05:52.677 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:18:31.934 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-20 02:18:09.898 00:05:52.529 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:19:00.606 00:05:01.820 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:19:00.693 00:05:01.734 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:21:00.745 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:25:05.265 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:25:05.266 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:25:05.475 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:25:05.469 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:25:05.269 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:25:05.344 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:22:00.674 00:05:01.834 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:22:00.724 00:05:01.723 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:21:09.879 00:05:52.589 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:22:09.851 00:05:52.576 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:23:09.832 00:05:52.683 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:23:51.939 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2712 1 2025-11-20 02:24:09.900 00:05:52.530 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:25:00.608 00:05:01.822 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:25:00.695 00:05:01.735 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:30:04.949 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:30:04.795 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:30:04.936 00:00:00.028 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:30:04.714 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:30:04.725 00:00:00.026 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:30:05.073 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:27:00.747 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:28:00.676 00:05:01.835 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:28:00.727 00:05:01.724 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:27:09.881 00:05:52.590 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:28:09.852 00:05:52.579 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:29:11.946 00:05:10.308 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2692 1 2025-11-20 02:29:09.833 00:05:52.678 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:35:04.945 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:30:09.901 00:05:52.530 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:35:04.921 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:31:00.610 00:05:01.821 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:31:00.696 00:05:01.735 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:35:04.975 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:35:05.186 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:35:05.130 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:35:05.005 00:00:00.020 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:33:00.748 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:34:00.727 00:05:01.724 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:33:09.881 00:05:52.590 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:34:00.676 00:05:01.835 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:34:31.949 00:05:00.379 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2412 1 2025-11-20 02:34:09.854 00:05:52.577 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:35:09.835 00:05:52.677 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:40:04.974 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:40:04.894 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:40:04.894 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:40:05.104 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:40:05.198 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:40:05.078 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:36:09.905 00:05:52.527 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:37:00.621 00:05:01.811 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:37:00.698 00:05:01.734 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:39:00.750 00:05:01.682 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:39:41.953 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-20 02:40:00.729 00:05:01.723 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:39:09.884 00:05:52.588 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:40:00.678 00:05:01.834 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:45:05.326 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:45:05.108 00:00:00.026 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:45:05.204 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:45:05.314 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:40:09.857 00:05:52.576 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:45:05.235 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:45:05.117 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:41:09.836 00:05:52.678 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:43:00.698 00:05:01.734 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:42:09.905 00:05:52.527 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:43:00.626 00:05:01.806 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:45:00.751 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:45:01.955 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2712 1 2025-11-20 02:46:00.681 00:05:01.834 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:46:00.736 00:05:01.719 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:45:09.885 00:05:52.590 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:50:05.427 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:50:05.300 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:50:05.303 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:50:05.284 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:50:05.202 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:50:05.216 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:46:09.861 00:05:52.574 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:47:09.841 00:05:52.674 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:48:09.907 00:05:52.529 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:49:00.638 00:05:01.798 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:49:00.701 00:05:01.735 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:50:21.962 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2444 1 2025-11-20 02:55:05.562 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:55:05.517 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:55:05.648 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:55:05.778 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:51:00.754 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:55:05.569 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:55:05.569 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:52:00.681 00:05:01.836 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:52:00.733 00:05:01.723 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:51:09.887 00:05:52.590 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:52:09.863 00:05:52.575 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:53:09.842 00:05:52.676 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112420, total packets: 1692, avg bps: 231, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 01:54:09 - 2025-11-20 02:59:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0036s User: 0.0018s Wall: 0.0024s flows/second: 70985.6 Runtime: 0.0025s