Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 20:55:01.158 00:05:01.685 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 20:55:01.235 00:05:01.608 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 21:00:28.811 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:00:28.697 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:00:29.022 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:00:29.023 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:00:28.948 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:00:28.777 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:57:01.217 00:05:01.625 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 20:56:53.518 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2304 1 2025-11-20 20:57:02.883 00:05:07.381 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 20:58:01.199 00:05:01.666 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 20:58:01.215 00:05:01.710 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 20:58:02.844 00:05:07.396 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 20:59:02.927 00:05:07.292 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 21:00:02.843 00:05:07.442 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 21:01:01.159 00:05:01.686 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 21:01:01.235 00:05:01.611 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 21:05:28.920 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:05:28.922 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:05:29.133 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:05:29.123 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:05:29.005 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:05:29.002 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:02:13.527 00:05:10.013 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2672 1 2025-11-20 21:03:01.218 00:05:01.627 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 21:03:02.885 00:05:07.381 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 21:04:01.216 00:05:01.710 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 21:04:01.199 00:05:01.667 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 21:04:02.845 00:05:07.395 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 21:05:02.926 00:05:07.298 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 21:06:02.845 00:05:07.441 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 21:10:29.397 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:10:29.307 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:10:29.187 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:10:29.269 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:10:29.187 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:10:29.190 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:07:01.159 00:05:01.698 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 21:07:01.237 00:05:01.620 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 21:07:33.540 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-20 21:09:01.221 00:05:01.638 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 21:09:02.887 00:05:07.380 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 21:10:01.202 00:05:01.677 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 21:10:01.219 00:05:01.734 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 21:10:02.847 00:05:07.399 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 21:11:02.937 00:05:07.288 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 21:15:29.347 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:15:29.345 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:15:29.225 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:15:29.339 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:15:29.259 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:15:29.137 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:12:02.858 00:05:07.429 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 21:13:01.161 00:05:01.703 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 21:12:53.542 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 21:13:01.245 00:05:01.619 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 21:15:01.226 00:05:01.639 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 21:15:02.900 00:05:07.368 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 21:16:01.238 00:05:01.707 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 21:16:01.206 00:05:01.679 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 21:16:02.863 00:05:07.383 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 21:20:29.476 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:20:29.528 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:20:29.355 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:20:29.280 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:20:29.199 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:20:29.265 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:17:02.944 00:05:07.282 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 21:18:02.863 00:05:07.425 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 21:18:13.544 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2768 1 2025-11-20 21:19:01.172 00:05:01.693 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 21:19:01.259 00:05:01.607 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 21:21:01.226 00:05:01.641 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 21:21:02.904 00:05:07.365 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 21:25:29.855 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:25:30.377 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:25:30.603 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:25:30.375 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:25:30.393 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:25:30.297 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:22:01.239 00:05:01.708 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 21:22:01.207 00:05:01.680 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 21:22:02.864 00:05:07.384 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 21:23:02.945 00:05:07.284 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 21:23:33.549 00:05:00.636 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2380 1 2025-11-20 21:24:02.866 00:05:07.429 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 21:25:01.172 00:05:01.694 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 21:25:01.259 00:05:01.608 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 21:30:29.455 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:30:29.546 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:30:29.666 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:30:29.786 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:30:29.439 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:30:29.627 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:27:01.230 00:05:01.637 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 21:27:02.907 00:05:07.376 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 21:28:01.240 00:05:01.708 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 21:28:01.211 00:05:01.677 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 21:28:02.867 00:05:07.384 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 21:28:43.557 00:05:10.012 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2608 1 2025-11-20 21:29:02.947 00:05:07.301 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 21:30:02.867 00:05:07.437 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 21:31:01.177 00:05:01.691 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 21:31:01.267 00:05:01.601 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 21:35:29.746 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:35:29.651 00:00:00.034 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:35:29.733 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:35:29.720 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:35:29.640 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:35:29.535 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:33:01.238 00:05:01.631 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 21:33:02.907 00:05:07.377 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 21:34:01.253 00:05:01.697 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 21:34:01.214 00:05:01.676 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 21:34:02.868 00:05:07.385 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 21:34:03.569 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2512 1 2025-11-20 21:35:02.949 00:05:07.284 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 21:36:02.869 00:05:07.437 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 21:40:29.704 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:40:29.787 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:40:29.918 00:00:00.030 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:40:29.839 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:40:29.835 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:40:29.866 00:00:00.032 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:37:01.177 00:05:01.692 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 21:37:01.272 00:05:01.597 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 21:39:01.234 00:05:01.637 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 21:39:02.910 00:05:07.376 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 21:39:23.578 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 21:40:01.216 00:05:01.676 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 21:40:01.254 00:05:01.698 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 21:40:02.870 00:05:07.384 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 21:41:02.951 00:05:07.283 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 21:45:29.927 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:45:29.915 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:45:30.127 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:45:30.007 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:45:29.997 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:45:30.010 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:42:02.870 00:05:07.437 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 21:43:01.181 00:05:01.694 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 21:43:01.275 00:05:01.600 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 21:44:43.581 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 21:45:01.240 00:05:01.634 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 21:45:02.911 00:05:07.376 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 21:46:01.254 00:05:01.701 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 21:46:01.220 00:05:01.675 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 21:46:02.871 00:05:07.384 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 21:50:29.738 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:50:29.729 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:50:29.939 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:50:29.941 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:50:29.814 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:50:29.818 00:00:00.031 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:47:02.952 00:05:07.283 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 21:48:02.875 00:05:07.433 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 21:49:01.186 00:05:01.689 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 21:49:01.279 00:05:01.597 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 21:50:03.586 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2708 1 2025-11-20 21:51:01.243 00:05:01.632 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 21:51:02.915 00:05:07.379 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 21:55:29.933 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 21:55:30.099 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 21:55:29.918 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:55:30.311 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:55:30.220 00:00:00.053 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:55:30.015 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 21:52:01.259 00:05:01.697 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 21:52:01.224 00:05:01.672 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 21:52:02.875 00:05:07.381 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 21:53:02.956 00:05:07.281 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 21:54:02.875 00:05:07.440 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112100, total packets: 1692, avg bps: 232, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 20:55:01 - 2025-11-20 21:59:10 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0038s User: 0.0019s Wall: 0.0021s flows/second: 81603.1 Runtime: 0.0021s