Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 12:55:00.940 00:05:01.710 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 12:55:00.976 00:05:01.674 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 13:00:19.508 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:00:19.553 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:00:19.336 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:00:19.262 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:00:19.183 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:00:19.299 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 12:57:00.961 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 12:57:02.689 00:05:07.413 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 12:58:00.957 00:05:01.775 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 12:58:00.942 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 12:57:52.833 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2564 1 2025-11-20 12:58:02.649 00:05:07.411 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 12:59:02.729 00:05:07.310 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 13:00:02.650 00:05:07.472 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 13:01:00.942 00:05:01.711 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 13:01:00.978 00:05:01.675 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 13:05:19.389 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:05:19.270 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:05:19.469 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:05:19.480 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:05:19.380 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:05:19.257 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:03:00.964 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 13:03:02.691 00:05:07.411 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 13:03:12.840 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-20 13:04:00.961 00:05:01.772 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 13:04:00.948 00:05:01.725 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 13:04:02.652 00:05:07.411 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 13:05:02.733 00:05:07.311 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 13:06:02.652 00:05:07.472 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 13:10:19.814 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:10:19.486 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:10:19.657 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:10:19.540 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:10:19.605 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:10:19.461 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:07:00.943 00:05:01.710 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 13:07:00.978 00:05:01.676 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 13:08:32.845 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2256 1 2025-11-20 13:09:00.970 00:05:01.684 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 13:09:02.693 00:05:07.411 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 13:10:00.958 00:05:01.777 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 13:10:00.949 00:05:01.725 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 13:10:02.653 00:05:07.411 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 13:11:02.734 00:05:07.310 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 13:15:19.570 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:15:19.807 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:15:19.706 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:15:19.475 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:15:19.491 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:15:19.598 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:12:02.653 00:05:07.473 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 13:13:00.944 00:05:01.710 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 13:13:00.982 00:05:01.672 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 13:13:52.852 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2752 1 2025-11-20 13:15:00.972 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 13:15:02.694 00:05:07.411 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 13:16:00.952 00:05:01.722 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 13:16:00.962 00:05:01.772 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 13:16:02.653 00:05:07.413 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 13:20:19.572 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:20:19.703 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:20:19.921 00:00:00.016 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:20:19.838 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:20:19.791 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:20:19.651 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:17:02.734 00:05:07.312 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 13:18:02.653 00:05:07.473 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 13:19:00.945 00:05:01.710 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 13:19:00.986 00:05:01.669 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 13:19:12.857 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2368 1 2025-11-20 13:21:00.974 00:05:01.681 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 13:21:02.695 00:05:07.413 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 13:25:19.710 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:25:19.968 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:25:19.915 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:25:19.909 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:25:19.887 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:25:19.704 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:22:00.966 00:05:01.771 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 13:22:00.955 00:05:01.722 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 13:22:02.654 00:05:07.412 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 13:23:02.735 00:05:07.313 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 13:24:02.655 00:05:07.474 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 13:24:32.863 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2672 1 2025-11-20 13:25:00.958 00:05:01.703 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 13:25:00.990 00:05:01.671 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 13:30:19.872 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:30:19.923 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:30:19.842 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:30:19.843 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:30:20.054 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:30:20.110 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:27:00.977 00:05:01.684 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 13:27:02.697 00:05:07.411 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 13:28:00.969 00:05:01.772 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 13:28:00.958 00:05:01.722 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 13:28:02.659 00:05:07.409 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 13:29:02.741 00:05:07.307 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 13:29:52.866 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-20 13:30:02.660 00:05:07.471 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 13:31:00.960 00:05:01.701 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 13:31:00.990 00:05:01.671 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 13:35:20.160 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:35:20.374 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:35:20.174 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:35:20.056 00:00:00.030 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:35:20.080 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:35:20.164 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:33:00.980 00:05:01.682 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 13:33:02.700 00:05:07.410 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 13:34:00.961 00:05:01.721 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 13:34:00.971 00:05:01.771 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 13:34:02.661 00:05:07.441 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 13:35:02.742 00:05:07.341 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 13:35:12.871 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 13:36:02.661 00:05:07.469 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 13:40:20.365 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:40:20.364 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:40:20.576 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:40:20.542 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:40:20.213 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:40:20.446 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:37:00.971 00:05:01.690 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 13:37:00.995 00:05:01.667 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 13:39:00.982 00:05:01.681 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 13:39:02.702 00:05:07.410 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 13:40:00.977 00:05:01.767 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 13:40:00.963 00:05:01.720 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 13:40:02.661 00:05:07.444 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 13:40:32.874 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2672 1 2025-11-20 13:41:02.742 00:05:07.343 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 13:45:19.965 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:45:20.176 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:45:20.295 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:45:20.166 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:45:20.162 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:45:20.083 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:42:02.662 00:05:07.470 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 13:43:00.972 00:05:01.691 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 13:43:00.997 00:05:01.666 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 13:45:00.983 00:05:01.680 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 13:45:02.702 00:05:07.409 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 13:46:00.978 00:05:01.765 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 13:46:00.963 00:05:01.720 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 13:45:52.879 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-20 13:46:02.663 00:05:07.444 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 13:50:20.327 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:50:20.443 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:50:20.382 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:50:20.325 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:50:20.244 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:50:20.116 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:47:02.743 00:05:07.345 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 13:48:02.662 00:05:07.470 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 13:49:00.974 00:05:01.690 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 13:49:01.001 00:05:01.663 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 13:51:00.984 00:05:01.684 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 13:51:02.704 00:05:07.409 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 13:55:20.514 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:55:20.585 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:55:20.471 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:55:20.179 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 13:55:20.100 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 13:51:12.889 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2812 1 2025-11-20 13:55:20.304 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 13:52:01.000 00:05:01.745 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 13:52:00.969 00:05:01.716 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 13:52:02.664 00:05:07.448 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 13:53:02.744 00:05:07.348 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 13:54:02.663 00:05:07.470 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112500, total packets: 1695, avg bps: 233, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 12:55:00 - 2025-11-20 13:59:10 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0043s User: 0.0014s Wall: 0.0024s flows/second: 71285.4 Runtime: 0.0024s