Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 05:54:09.957 00:05:52.554 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 05:55:00.724 00:05:01.787 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:55:00.752 00:05:01.759 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:00:09.521 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:00:09.672 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:00:09.592 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:00:09.404 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:00:09.324 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:00:09.311 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 05:56:42.228 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 05:57:00.814 00:05:01.698 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:58:00.732 00:05:01.860 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:58:00.793 00:05:01.739 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:57:09.937 00:05:52.615 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:58:09.916 00:05:52.596 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:59:09.896 00:05:52.697 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:00:09.960 00:05:52.553 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:01:00.721 00:05:01.792 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:01:00.753 00:05:01.760 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:05:09.157 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:05:09.258 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:05:09.463 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:05:09.293 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:05:09.238 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:05:09.470 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:02:02.237 00:05:10.078 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2564 1 2025-11-20 06:03:00.815 00:05:01.697 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:04:00.733 00:05:01.860 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:04:00.795 00:05:01.737 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:03:09.940 00:05:52.612 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:04:09.916 00:05:52.597 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:05:09.896 00:05:52.697 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:10:09.366 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:10:09.207 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:10:09.419 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:10:09.573 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:10:09.423 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:10:09.447 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:06:09.960 00:05:52.553 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:07:00.721 00:05:01.792 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:07:00.762 00:05:01.751 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:07:22.247 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-20 06:09:00.817 00:05:01.696 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:10:00.746 00:05:01.848 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:10:00.796 00:05:01.738 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:09:09.941 00:05:52.613 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:10:09.917 00:05:52.596 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:15:09.635 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:15:09.557 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:15:09.549 00:00:00.031 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:15:09.443 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:15:09.361 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:15:09.423 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:11:09.898 00:05:52.696 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:12:42.255 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2492 1 2025-11-20 06:12:09.961 00:05:52.555 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:13:00.722 00:05:01.792 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:13:00.763 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:15:00.817 00:05:01.698 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:16:00.743 00:05:01.852 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:16:00.797 00:05:01.738 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:15:09.941 00:05:52.614 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:20:09.635 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:20:09.575 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:20:09.512 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:20:09.637 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:20:09.432 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:20:09.427 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:16:09.918 00:05:52.598 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:17:09.899 00:05:52.697 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:18:02.261 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2628 1 2025-11-20 06:18:09.964 00:05:52.552 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:19:00.723 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:19:00.764 00:05:01.752 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:21:00.817 00:05:01.699 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:25:09.972 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:25:09.916 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:25:09.913 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:25:09.833 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:25:09.761 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:25:10.199 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:22:00.755 00:05:01.842 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:22:00.798 00:05:01.738 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:21:09.945 00:05:52.611 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:22:09.921 00:05:52.595 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:23:22.273 00:05:10.014 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-20 06:23:09.901 00:05:52.695 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:24:09.965 00:05:52.551 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:25:00.726 00:05:01.790 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:25:00.775 00:05:01.741 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:30:09.764 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:30:09.851 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:30:09.889 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:30:09.882 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:30:09.771 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:30:09.678 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:27:00.821 00:05:01.695 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:27:09.946 00:05:52.615 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:28:00.756 00:05:01.845 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:28:00.802 00:05:01.739 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:28:42.289 00:05:10.027 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-20 06:28:09.924 00:05:52.596 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:29:09.905 00:05:52.697 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:30:09.967 00:05:52.554 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:31:00.727 00:05:01.794 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:31:00.794 00:05:01.727 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:35:09.765 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:35:09.833 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:35:09.974 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:35:09.846 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:35:10.044 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:35:10.041 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:33:00.822 00:05:01.703 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:34:00.758 00:05:01.844 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:34:00.803 00:05:01.739 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:33:09.948 00:05:52.614 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:34:02.294 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2736 1 2025-11-20 06:34:09.924 00:05:52.597 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:35:09.904 00:05:52.698 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:40:09.965 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:40:09.964 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:40:10.174 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:40:10.171 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:40:10.052 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:40:10.044 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:36:09.969 00:05:52.552 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:37:00.735 00:05:01.786 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:37:00.788 00:05:01.733 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:39:00.824 00:05:01.699 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:39:22.302 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2436 1 2025-11-20 06:40:00.772 00:05:01.831 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:40:00.804 00:05:01.739 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:39:09.950 00:05:52.613 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:40:09.926 00:05:52.597 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:45:10.189 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:45:10.146 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:45:10.367 00:00:00.011 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:45:10.211 00:00:00.046 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:45:09.998 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:45:10.270 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:41:09.907 00:05:52.697 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:42:09.970 00:05:52.553 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:43:00.728 00:05:01.795 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:43:00.800 00:05:01.723 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:44:42.312 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2476 1 2025-11-20 06:45:00.824 00:05:01.699 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:46:00.782 00:05:01.823 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:46:00.805 00:05:01.739 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:45:09.951 00:05:52.614 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:50:10.077 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:50:10.340 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:50:10.206 00:00:00.048 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:50:10.082 00:00:00.038 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:50:09.998 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:50:10.131 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:46:09.930 00:05:52.595 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:47:09.912 00:05:52.693 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:48:09.971 00:05:52.554 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:49:00.729 00:05:01.796 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:49:00.802 00:05:01.723 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:50:02.322 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2688 1 2025-11-20 06:51:00.826 00:05:01.699 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:55:10.131 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:55:10.284 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:55:10.494 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:55:10.417 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:55:10.296 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:55:10.211 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:52:00.806 00:05:01.745 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:51:09.951 00:05:52.620 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:52:00.782 00:05:01.830 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:52:09.933 00:05:52.600 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:53:09.912 00:05:52.700 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112248, total packets: 1694, avg bps: 230, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 05:54:09 - 2025-11-20 06:59:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0044s User: 0.0018s Wall: 0.0023s flows/second: 76784.6 Runtime: 0.0023s