Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 15:55:01.014 00:05:01.709 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 15:55:01.103 00:05:01.620 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 16:00:23.117 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:00:23.121 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:00:23.069 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:00:22.897 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:00:22.907 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:00:22.817 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 15:57:01.043 00:05:01.680 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 15:57:02.766 00:05:07.404 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 15:58:01.084 00:05:01.720 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 15:58:01.017 00:05:01.727 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 15:58:02.723 00:05:07.420 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 15:58:33.053 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 15:59:02.803 00:05:07.320 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 16:00:02.725 00:05:07.467 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 16:01:01.017 00:05:01.713 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 16:01:01.117 00:05:01.613 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 16:05:23.050 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:05:22.973 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:05:22.928 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:05:22.922 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:05:22.840 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:05:22.842 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:03:01.038 00:05:01.692 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 16:03:02.765 00:05:07.407 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 16:04:01.103 00:05:01.710 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 16:04:01.021 00:05:01.732 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 16:03:53.060 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2752 1 2025-11-20 16:04:02.731 00:05:07.420 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 16:05:02.811 00:05:07.319 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 16:06:02.730 00:05:07.463 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 16:10:23.421 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:10:23.492 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:10:23.629 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:10:23.626 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:10:23.426 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:10:23.582 00:00:00.010 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:07:01.019 00:05:01.713 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 16:07:01.122 00:05:01.610 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 16:09:01.059 00:05:01.673 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 16:09:02.771 00:05:07.403 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 16:09:13.069 00:05:10.068 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2508 1 2025-11-20 16:10:01.102 00:05:01.711 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 16:10:01.051 00:05:01.702 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 16:10:02.732 00:05:07.419 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 16:11:02.811 00:05:07.319 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 16:15:23.433 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:15:23.166 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:15:23.180 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:15:23.227 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:15:23.146 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:15:23.222 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:12:02.732 00:05:07.464 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 16:13:01.019 00:05:01.714 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 16:13:01.122 00:05:01.611 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 16:14:33.073 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2672 1 2025-11-20 16:15:01.076 00:05:01.660 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 16:15:02.773 00:05:07.403 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 16:16:01.058 00:05:01.699 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 16:16:01.107 00:05:01.710 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 16:16:02.732 00:05:07.419 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 16:20:23.414 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:20:23.555 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:20:23.348 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:20:23.396 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:20:23.317 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:20:23.204 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:17:02.813 00:05:07.319 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 16:18:02.734 00:05:07.463 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 16:19:01.023 00:05:01.714 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 16:19:01.127 00:05:01.610 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 16:19:53.077 00:05:10.044 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2528 1 2025-11-20 16:21:01.077 00:05:01.658 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 16:21:02.776 00:05:07.403 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 16:25:23.419 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:25:23.552 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:25:23.291 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:25:23.173 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:25:23.341 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:25:23.338 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:22:01.106 00:05:01.711 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 16:22:01.058 00:05:01.698 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 16:22:02.736 00:05:07.418 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 16:23:02.816 00:05:07.318 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 16:24:02.737 00:05:07.466 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 16:25:01.023 00:05:01.713 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 16:25:01.126 00:05:01.610 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 16:25:13.086 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 16:30:23.405 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:30:23.402 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:30:23.613 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:30:23.518 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:30:23.613 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:30:23.486 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:27:01.080 00:05:01.658 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 16:27:02.775 00:05:07.406 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 16:28:01.107 00:05:01.710 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 16:28:01.058 00:05:01.699 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 16:28:02.737 00:05:07.419 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 16:29:02.816 00:05:07.319 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 16:30:02.736 00:05:07.468 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 16:30:33.095 00:05:10.013 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-20 16:31:01.027 00:05:01.713 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 16:31:01.128 00:05:01.612 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 16:35:23.388 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:35:23.468 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:35:23.679 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:35:23.671 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:35:23.644 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:35:23.468 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:33:01.080 00:05:01.660 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 16:33:02.777 00:05:07.406 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 16:34:01.108 00:05:01.711 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 16:34:01.059 00:05:01.700 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 16:34:02.738 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 16:35:02.817 00:05:07.323 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 16:35:53.108 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2592 1 2025-11-20 16:36:02.739 00:05:07.468 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 16:40:23.882 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:40:23.818 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:40:23.755 00:00:00.026 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:40:23.696 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:40:23.618 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:40:23.673 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:37:01.130 00:05:01.612 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 16:37:01.030 00:05:01.711 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 16:39:01.087 00:05:01.653 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 16:39:02.780 00:05:07.408 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 16:40:01.068 00:05:01.692 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 16:40:01.108 00:05:01.712 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 16:40:02.739 00:05:07.421 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 16:41:02.820 00:05:07.321 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 16:45:23.929 00:00:00.019 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:45:23.908 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:45:23.643 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:45:23.783 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:45:23.716 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:45:23.703 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:41:13.119 00:05:10.014 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2240 1 2025-11-20 16:42:02.739 00:05:07.468 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 16:43:01.032 00:05:01.711 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 16:43:01.129 00:05:01.614 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 16:45:01.089 00:05:01.656 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 16:45:02.781 00:05:07.408 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 16:46:01.110 00:05:01.717 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 16:46:01.069 00:05:01.697 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 16:46:02.740 00:05:07.421 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 16:50:24.141 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:50:24.140 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:50:24.350 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:50:24.235 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:50:24.104 00:00:00.035 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:50:24.221 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:46:33.131 00:05:10.061 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2880 1 2025-11-20 16:47:02.824 00:05:07.318 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 16:48:02.743 00:05:07.466 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 16:49:01.032 00:05:01.715 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 16:49:01.130 00:05:01.617 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 16:51:01.097 00:05:01.651 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 16:51:02.787 00:05:07.407 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 16:55:23.932 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:55:24.066 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:55:24.055 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:55:23.999 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 16:55:23.851 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 16:55:23.855 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 16:52:01.113 00:05:01.715 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 16:52:01.077 00:05:01.691 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 16:51:53.140 00:05:10.018 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 16:52:02.745 00:05:07.417 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 16:53:02.827 00:05:07.316 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 16:54:02.747 00:05:07.468 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112416, total packets: 1695, avg bps: 233, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 15:55:01 - 2025-11-20 16:59:10 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0058s User: 0.0010s Wall: 0.0025s flows/second: 68164.8 Runtime: 0.0026s