Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 04:55:03.419 00:05:01.749 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 04:55:03.517 00:05:01.651 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 04:55:12.364 00:05:52.846 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 04:55:12.398 00:05:52.771 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 04:57:03.541 00:05:01.627 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 04:58:03.497 00:05:01.752 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 04:58:03.521 00:05:01.667 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 04:58:05.250 00:05:07.132 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 05:02:33.949 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 04:58:22.124 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2532 1 2025-11-25 05:02:33.999 00:00:00.051 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:02:34.210 00:00:00.051 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:02:34.223 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:02:34.082 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:02:34.030 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 04:59:12.384 00:05:52.787 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 05:01:03.422 00:05:01.751 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 05:01:03.520 00:05:01.653 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 05:01:12.402 00:05:52.770 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 05:01:12.364 00:05:52.848 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 05:03:03.542 00:05:01.630 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 05:07:34.506 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:07:34.202 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:07:33.966 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:07:34.077 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:07:33.998 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:07:34.297 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:03:42.131 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2480 1 2025-11-25 05:04:03.500 00:05:01.753 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 05:04:03.523 00:05:01.670 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 05:04:05.249 00:05:07.134 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 05:05:12.387 00:05:52.786 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 05:07:03.424 00:05:01.749 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 05:07:03.520 00:05:01.653 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 05:07:12.403 00:05:52.771 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 05:07:12.369 00:05:52.847 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 05:12:34.397 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.275 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.410 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.324 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.243 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:12:34.186 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:09:03.545 00:05:01.629 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 05:09:02.135 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2432 1 2025-11-25 05:10:03.500 00:05:01.753 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 05:10:03.524 00:05:01.669 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 05:10:05.252 00:05:07.133 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 05:11:12.387 00:05:52.787 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 05:13:03.424 00:05:01.749 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 05:13:03.521 00:05:01.653 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 05:17:34.541 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:17:34.532 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:17:34.415 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:17:34.349 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:17:34.268 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:17:34.330 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:13:12.371 00:05:52.843 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 05:13:12.404 00:05:52.769 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 05:14:22.140 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2832 1 2025-11-25 05:15:03.545 00:05:01.629 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 05:16:03.500 00:05:01.769 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 05:16:03.524 00:05:01.684 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 05:16:05.253 00:05:07.134 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 05:17:12.391 00:05:52.783 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 05:22:34.479 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:22:34.420 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:22:34.630 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:22:34.686 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:22:34.427 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:22:34.559 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:19:03.429 00:05:01.745 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 05:19:03.521 00:05:01.654 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 05:19:42.148 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2492 1 2025-11-25 05:19:12.408 00:05:52.767 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 05:19:12.371 00:05:52.843 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 05:21:03.546 00:05:01.628 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 05:22:03.503 00:05:01.751 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 05:22:03.526 00:05:01.668 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 05:22:05.254 00:05:07.134 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 05:27:34.892 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:27:34.949 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:27:34.651 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:27:34.872 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:27:34.793 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:27:34.681 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:23:12.393 00:05:52.785 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 05:25:03.427 00:05:01.751 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 05:25:03.527 00:05:01.651 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 05:25:02.158 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-25 05:25:12.409 00:05:52.769 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 05:25:12.375 00:05:52.844 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 05:27:03.548 00:05:01.630 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 05:28:03.505 00:05:01.768 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 05:28:03.527 00:05:01.685 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 05:28:05.256 00:05:07.136 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 05:32:34.663 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:32:34.725 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:32:34.933 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:32:34.866 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:32:34.662 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:32:34.742 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:29:12.397 00:05:52.781 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 05:30:22.170 00:05:10.018 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2464 1 2025-11-25 05:31:03.431 00:05:01.748 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 05:31:03.528 00:05:01.651 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 05:31:12.378 00:05:52.841 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 05:31:12.412 00:05:52.767 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 05:33:03.549 00:05:01.629 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 05:37:34.646 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:37:34.646 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:37:34.858 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:37:34.856 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:37:34.890 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:37:34.728 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:34:03.507 00:05:01.751 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 05:34:03.529 00:05:01.669 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 05:34:05.258 00:05:07.137 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 05:35:42.186 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-25 05:35:12.401 00:05:52.777 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 05:37:03.432 00:05:01.747 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 05:37:03.530 00:05:01.650 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 05:37:12.382 00:05:52.838 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 05:37:12.412 00:05:52.767 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 05:42:34.764 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:42:34.973 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:42:34.685 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:42:34.880 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:42:35.089 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:42:35.038 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:39:03.552 00:05:01.628 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 05:40:03.509 00:05:01.771 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 05:40:03.532 00:05:01.688 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 05:40:05.259 00:05:07.137 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 05:41:02.195 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2748 1 2025-11-25 05:41:12.402 00:05:52.776 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 05:43:03.433 00:05:01.746 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 05:43:03.530 00:05:01.650 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 05:47:34.773 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:47:34.855 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:47:34.983 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:47:35.078 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:47:35.172 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:47:35.092 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:43:12.384 00:05:52.836 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 05:43:12.415 00:05:52.764 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 05:45:03.556 00:05:01.624 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 05:46:03.513 00:05:01.748 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 05:46:03.536 00:05:01.665 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 05:46:05.260 00:05:07.137 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 05:46:22.201 00:05:10.019 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2484 1 2025-11-25 05:47:12.405 00:05:52.775 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 05:52:34.932 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:52:35.190 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:52:35.012 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:52:35.065 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:52:35.142 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:52:34.985 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:49:03.434 00:05:01.746 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 05:49:03.532 00:05:01.648 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 05:49:12.416 00:05:52.764 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 05:49:12.386 00:05:52.834 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 05:51:03.557 00:05:01.626 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 05:51:42.220 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2492 1 2025-11-25 05:52:03.513 00:05:01.750 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 05:52:03.536 00:05:01.666 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 05:52:05.261 00:05:07.136 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 05:57:35.175 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 05:57:35.211 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 05:57:35.422 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:57:35.419 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:57:35.263 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:57:35.255 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 05:53:12.406 00:05:52.777 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112448, total packets: 1693, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-11-25 04:55:03 - 2025-11-25 05:59:05 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0055s User: 0.0009s Wall: 0.0021s flows/second: 84178.0 Runtime: 0.0021s