Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 04:54:09.941 00:05:52.550 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:55:00.698 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:55:00.737 00:05:01.754 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:00:07.920 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:00:07.980 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:00:08.191 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:00:08.179 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:00:08.104 00:00:00.031 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:00:08.001 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:57:00.792 00:05:01.701 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:58:00.717 00:05:01.856 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:58:00.771 00:05:01.742 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:57:09.921 00:05:52.612 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:58:02.170 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-20 04:58:09.903 00:05:52.592 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:59:09.883 00:05:52.691 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 05:00:09.943 00:05:52.551 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 05:01:00.699 00:05:01.795 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:01:00.742 00:05:01.752 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:05:08.083 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:05:08.189 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:05:08.166 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:05:08.191 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:05:08.111 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:05:07.869 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:03:00.794 00:05:01.702 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:03:22.178 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2336 1 2025-11-20 05:04:00.718 00:05:01.858 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:04:00.773 00:05:01.743 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:03:09.923 00:05:52.613 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:04:09.905 00:05:52.592 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:05:09.885 00:05:52.693 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 05:10:08.200 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:10:08.147 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:10:08.322 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:10:08.195 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:10:08.119 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:10:07.935 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:06:09.944 00:05:52.553 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 05:07:00.703 00:05:01.794 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:07:00.739 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:08:42.184 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2656 1 2025-11-20 05:09:00.795 00:05:01.702 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:10:00.718 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:10:00.774 00:05:01.743 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:09:09.925 00:05:52.612 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:10:09.907 00:05:52.593 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:15:08.146 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:15:08.145 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:15:08.356 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:15:08.353 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:15:08.296 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:15:08.227 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:11:09.888 00:05:52.690 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 05:12:09.946 00:05:52.552 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 05:13:00.705 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:13:00.740 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:14:02.190 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2556 1 2025-11-20 05:15:00.805 00:05:01.693 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:16:00.719 00:05:01.858 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:16:00.784 00:05:01.733 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:15:09.928 00:05:52.609 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:20:08.601 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:20:08.734 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:20:08.653 00:00:00.009 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:20:08.673 00:00:00.026 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:20:08.522 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:20:08.523 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:16:09.907 00:05:52.592 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:17:09.888 00:05:52.692 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 05:18:09.948 00:05:52.552 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 05:19:00.706 00:05:01.794 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:19:00.740 00:05:01.760 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:19:22.197 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2356 1 2025-11-20 05:21:00.807 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:25:08.430 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:25:08.652 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:25:08.862 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:25:08.631 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:25:08.521 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:25:08.510 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:22:00.722 00:05:01.860 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:22:00.789 00:05:01.732 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:21:09.930 00:05:52.612 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:22:09.909 00:05:52.593 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:23:09.888 00:05:52.694 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 05:24:42.201 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2688 1 2025-11-20 05:24:09.951 00:05:52.552 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 05:25:00.710 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:25:00.746 00:05:01.757 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:30:08.900 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:30:08.679 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:30:08.723 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:30:08.716 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:30:08.636 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:30:08.690 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:27:00.808 00:05:01.693 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:28:00.724 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:28:00.789 00:05:01.733 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:27:09.930 00:05:52.612 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:28:09.909 00:05:52.594 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:29:09.889 00:05:52.694 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 05:30:02.206 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 05:35:09.002 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:35:08.771 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:35:08.966 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:35:08.873 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:30:09.951 00:05:52.553 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 05:31:00.710 00:05:01.794 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:31:00.745 00:05:01.759 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:35:08.793 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:35:08.791 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:33:00.809 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:34:00.725 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:34:00.789 00:05:01.734 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:33:09.930 00:05:52.613 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:34:09.910 00:05:52.594 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:35:22.212 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2752 1 2025-11-20 05:40:08.705 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:40:08.617 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:35:09.891 00:05:52.695 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 05:40:08.925 00:00:00.015 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:40:08.978 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:40:08.698 00:00:00.032 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:40:08.699 00:00:00.031 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:36:09.951 00:05:52.552 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 05:37:00.710 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:37:00.746 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:39:00.810 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:40:00.790 00:05:01.735 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:39:09.933 00:05:52.612 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:40:00.726 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:40:42.214 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2508 1 2025-11-20 05:40:09.912 00:05:52.593 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:45:08.908 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:45:08.777 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:45:09.054 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:45:08.871 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:45:08.791 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:45:08.698 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:41:09.894 00:05:52.692 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 05:42:09.955 00:05:52.550 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 05:43:00.712 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:43:00.757 00:05:01.748 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:45:00.811 00:05:01.697 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:46:00.792 00:05:01.737 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:45:09.936 00:05:52.613 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:46:00.728 00:05:01.861 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:50:09.339 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:50:09.461 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:50:09.077 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:50:09.305 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:50:09.225 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:50:09.129 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:46:02.217 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2608 1 2025-11-20 05:46:09.913 00:05:52.596 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:47:09.894 00:05:52.696 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 05:48:09.957 00:05:52.552 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 05:49:00.716 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:49:00.752 00:05:01.757 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:51:00.812 00:05:01.696 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:55:08.969 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:55:09.096 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:55:09.050 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:55:09.306 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:55:09.313 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:55:09.062 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 05:51:22.223 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-20 05:52:00.732 00:05:01.857 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:52:00.793 00:05:01.736 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:51:09.936 00:05:52.613 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:52:09.914 00:05:52.595 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:53:09.894 00:05:52.695 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112416, total packets: 1695, avg bps: 231, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 04:54:09 - 2025-11-20 05:59:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0045s User: 0.0009s Wall: 0.0029s flows/second: 59923.6 Runtime: 0.0029s