Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 11:55:00.900 00:05:01.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 11:55:00.951 00:05:01.683 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 12:00:18.263 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.383 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.030 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.133 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:00:18.052 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:00:18.052 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 11:57:00.948 00:05:01.691 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 11:57:02.670 00:05:07.413 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 11:58:00.932 00:05:01.788 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 11:58:00.929 00:05:01.728 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 11:58:02.631 00:05:07.411 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 11:59:02.710 00:05:07.313 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 11:59:12.762 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2672 1 2025-11-20 12:00:02.633 00:05:07.471 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 12:01:00.902 00:05:01.735 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 12:01:00.952 00:05:01.685 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 12:05:18.181 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:05:18.178 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:05:18.100 00:00:00.039 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.262 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.389 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.375 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:03:00.950 00:05:01.688 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 12:03:02.677 00:05:07.408 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 12:04:00.933 00:05:01.786 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 12:04:00.930 00:05:01.729 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 12:04:02.638 00:05:07.407 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 12:04:32.767 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-20 12:05:02.719 00:05:07.306 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 12:10:18.495 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.459 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.339 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:10:18.288 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:06:02.638 00:05:07.469 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 12:10:18.208 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:10:18.285 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:07:00.908 00:05:01.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 12:07:00.957 00:05:01.684 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 12:09:00.951 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 12:09:02.678 00:05:07.408 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 12:10:00.930 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 12:10:00.937 00:05:01.783 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 12:09:52.776 00:05:10.001 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 12:10:02.639 00:05:07.405 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 12:11:02.720 00:05:07.304 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 12:15:18.643 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.647 00:00:00.030 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.529 00:00:00.030 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.523 00:00:00.032 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:15:18.443 00:00:00.032 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:15:18.433 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:12:02.640 00:05:07.468 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 12:13:00.908 00:05:01.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 12:13:00.965 00:05:01.676 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 12:15:00.952 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 12:15:02.680 00:05:07.411 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 12:15:12.777 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2752 1 2025-11-20 12:16:00.946 00:05:01.776 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 12:16:00.932 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 12:16:02.640 00:05:07.406 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 12:20:18.503 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.624 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.375 00:00:00.026 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.552 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:20:18.294 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:20:18.474 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:17:02.721 00:05:07.306 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 12:18:02.640 00:05:07.472 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 12:19:00.908 00:05:01.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 12:19:00.965 00:05:01.676 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 12:20:32.785 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2368 1 2025-11-20 12:21:00.953 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 12:21:02.682 00:05:07.411 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 12:25:18.426 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:25:18.425 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:25:18.732 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.505 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.634 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.725 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:22:00.946 00:05:01.775 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 12:22:00.933 00:05:01.728 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 12:22:02.641 00:05:07.406 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 12:23:02.722 00:05:07.306 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 12:24:02.640 00:05:07.473 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 12:25:00.921 00:05:01.724 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 12:25:00.967 00:05:01.678 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 12:25:52.791 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2608 1 2025-11-20 12:30:18.621 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:30:18.743 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:30:18.953 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.826 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.830 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.700 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:27:00.956 00:05:01.687 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 12:27:02.681 00:05:07.413 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 12:28:00.946 00:05:01.777 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 12:28:00.936 00:05:01.727 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 12:28:02.643 00:05:07.407 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 12:29:02.725 00:05:07.307 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 12:30:02.644 00:05:07.471 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 12:31:00.922 00:05:01.723 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 12:31:00.967 00:05:01.678 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 12:35:18.758 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:35:18.747 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:35:18.958 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.959 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.840 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:35:18.838 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:31:12.792 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-20 12:33:00.957 00:05:01.688 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 12:33:02.683 00:05:07.412 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 12:34:00.948 00:05:01.778 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 12:34:00.937 00:05:01.729 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 12:34:02.645 00:05:07.406 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 12:35:02.726 00:05:07.306 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 12:40:19.074 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.063 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.216 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:40:19.097 00:00:00.041 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:36:02.645 00:05:07.470 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 12:40:19.017 00:00:00.041 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:40:18.863 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:36:32.802 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 12:37:00.927 00:05:01.721 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 12:37:00.977 00:05:01.671 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 12:39:00.959 00:05:01.688 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 12:39:02.687 00:05:07.410 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 12:40:00.949 00:05:01.778 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 12:40:00.939 00:05:01.728 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 12:40:02.648 00:05:07.405 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 12:41:02.727 00:05:07.308 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 12:45:19.608 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.381 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.286 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.278 00:00:00.027 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.397 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:45:19.198 00:00:00.026 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:41:52.810 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-20 12:42:02.647 00:05:07.470 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 12:43:00.928 00:05:01.720 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 12:43:00.970 00:05:01.678 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 12:45:00.960 00:05:01.688 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 12:45:02.688 00:05:07.410 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 12:46:00.951 00:05:01.776 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 12:46:00.939 00:05:01.728 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 12:46:02.648 00:05:07.409 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 12:50:18.987 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:50:19.086 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:50:19.296 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.095 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.259 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:50:19.067 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:47:02.727 00:05:07.309 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 12:47:12.815 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2664 1 2025-11-20 12:48:02.648 00:05:07.470 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 12:49:00.931 00:05:01.716 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 12:49:00.973 00:05:01.674 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 12:51:00.962 00:05:01.688 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 12:51:02.687 00:05:07.411 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 12:55:19.047 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 12:55:18.944 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:55:19.143 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.127 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.154 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.276 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:52:00.955 00:05:01.774 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 12:52:00.941 00:05:01.728 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 12:52:02.648 00:05:07.410 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 12:52:32.828 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2492 1 2025-11-20 12:53:02.728 00:05:07.310 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 12:54:02.648 00:05:07.472 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112504, total packets: 1696, avg bps: 233, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 11:55:00 - 2025-11-20 12:59:10 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0035s User: 0.0018s Wall: 0.0016s flows/second: 106332.7 Runtime: 0.0016s