Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 03:54:09.932 00:05:52.537 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 03:55:00.665 00:05:01.804 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 03:55:00.717 00:05:01.752 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:00:06.816 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:00:06.989 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:00:06.939 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:00:06.862 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:00:06.736 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:00:06.779 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 03:57:00.775 00:05:01.695 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 03:58:00.756 00:05:01.735 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 03:57:09.911 00:05:52.600 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 03:58:00.697 00:05:01.854 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 03:58:09.885 00:05:52.586 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 03:59:32.085 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2500 1 2025-11-20 03:59:09.866 00:05:52.686 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:00:09.932 00:05:52.543 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:01:00.667 00:05:01.807 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:01:00.718 00:05:01.757 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:05:07.159 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:05:07.061 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:05:06.773 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:05:07.067 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:05:06.987 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:05:06.948 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:03:00.779 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:04:00.701 00:05:01.852 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:04:00.758 00:05:01.735 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:03:09.912 00:05:52.601 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:04:09.886 00:05:52.587 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:04:52.091 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 04:05:09.867 00:05:52.687 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:10:07.323 00:00:00.018 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:10:07.364 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:10:07.192 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:10:07.237 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:10:07.158 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:10:07.109 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:06:09.933 00:05:52.541 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:07:00.667 00:05:01.807 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:07:00.720 00:05:01.754 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:09:00.779 00:05:01.697 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:10:00.759 00:05:01.737 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:09:09.914 00:05:52.602 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:10:00.701 00:05:01.855 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:10:12.097 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2808 1 2025-11-20 04:10:09.888 00:05:52.588 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:15:07.201 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:15:07.118 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:15:07.328 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:15:07.208 00:00:00.037 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:15:07.252 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:15:07.281 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:11:09.868 00:05:52.688 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:12:09.935 00:05:52.541 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:13:00.669 00:05:01.807 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:13:00.727 00:05:01.749 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:15:00.780 00:05:01.696 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:15:32.108 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2368 1 2025-11-20 04:16:00.701 00:05:01.857 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:16:00.761 00:05:01.737 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:15:09.915 00:05:52.603 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:20:07.012 00:00:00.044 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:20:07.004 00:00:00.033 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:20:07.215 00:00:00.034 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:20:07.311 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:20:07.085 00:00:00.032 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:20:07.093 00:00:00.045 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:16:09.889 00:05:52.588 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:17:09.868 00:05:52.689 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:18:09.935 00:05:52.545 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:19:00.684 00:05:01.795 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:19:00.722 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:21:00.783 00:05:01.696 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:20:52.111 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2608 1 2025-11-20 04:25:07.207 00:00:00.032 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:25:07.264 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:25:07.474 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:25:07.331 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:25:07.359 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:25:07.287 00:00:00.032 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:22:00.706 00:05:01.854 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:22:00.763 00:05:01.736 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:21:09.916 00:05:52.603 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:22:09.891 00:05:52.589 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:23:09.873 00:05:52.687 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:24:09.936 00:05:52.543 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:25:00.685 00:05:01.794 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:25:00.727 00:05:01.752 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:30:07.563 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:30:07.433 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:30:07.395 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:30:07.304 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:30:07.225 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:30:07.354 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:26:12.116 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2628 1 2025-11-20 04:27:00.785 00:05:01.695 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:28:00.708 00:05:01.853 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:28:00.765 00:05:01.736 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:27:09.917 00:05:52.604 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:28:09.893 00:05:52.587 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:29:09.873 00:05:52.688 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:30:09.936 00:05:52.544 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:31:00.687 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:31:00.727 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:35:07.806 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:35:07.805 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:35:07.683 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:35:07.452 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:35:07.371 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:35:07.596 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:31:32.123 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 04:33:00.786 00:05:01.695 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:34:00.708 00:05:01.853 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:34:00.765 00:05:01.736 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:33:09.917 00:05:52.604 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:34:09.894 00:05:52.588 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:35:09.876 00:05:52.689 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:40:07.522 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:40:07.577 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:40:07.626 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:40:07.703 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:40:07.547 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:40:07.494 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:36:52.126 00:05:01.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2620 1 2025-11-20 04:36:09.939 00:05:52.545 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:37:00.694 00:05:01.790 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:37:00.731 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:39:00.786 00:05:01.697 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:40:00.710 00:05:01.854 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:40:00.766 00:05:01.737 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:39:09.918 00:05:52.605 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:40:09.896 00:05:52.588 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:45:07.703 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:45:07.544 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:45:07.665 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:45:07.628 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:45:07.783 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:45:07.756 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:41:09.876 00:05:52.693 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:42:02.131 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2368 1 2025-11-20 04:42:09.939 00:05:52.546 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:43:00.694 00:05:01.791 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:43:00.736 00:05:01.749 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:45:00.786 00:05:01.699 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:46:00.716 00:05:01.851 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:46:00.768 00:05:01.739 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:45:09.930 00:05:52.597 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:50:07.681 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:50:07.777 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:50:07.988 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:50:07.983 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:50:07.672 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:50:07.761 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:46:09.899 00:05:52.587 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:47:22.139 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2812 1 2025-11-20 04:47:09.879 00:05:52.687 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:48:09.941 00:05:52.546 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:49:00.695 00:05:01.792 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:49:00.737 00:05:01.750 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:51:00.788 00:05:01.700 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:55:07.972 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:55:08.029 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:55:07.747 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:55:07.992 00:00:00.016 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:55:07.905 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:55:07.762 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:52:00.716 00:05:01.852 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:52:00.768 00:05:01.740 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:51:09.920 00:05:52.608 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:52:42.151 00:05:10.020 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2484 1 2025-11-20 04:52:09.903 00:05:52.587 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:53:09.883 00:05:52.689 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112400, total packets: 1693, avg bps: 231, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 03:54:09 - 2025-11-20 04:59:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0055s User: 0.0011s Wall: 0.0030s flows/second: 57588.5 Runtime: 0.0030s