Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 15:55:03.637 00:05:01.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 15:55:03.752 00:05:01.618 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 15:55:12.585 00:05:52.826 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 15:55:12.621 00:05:52.749 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 15:57:03.799 00:05:01.572 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 15:58:03.781 00:05:01.611 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 15:58:03.733 00:05:01.719 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 15:58:05.450 00:05:07.153 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:58:23.087 00:05:10.001 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-11-25 16:02:47.465 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.342 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.279 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.309 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.100 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:02:47.201 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:59:12.606 00:05:52.767 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 16:01:03.638 00:05:01.734 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 16:01:03.752 00:05:01.620 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 16:01:12.624 00:05:52.752 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 16:01:12.588 00:05:52.828 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 16:03:03.800 00:05:01.572 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 16:07:47.944 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:07:48.013 00:00:00.046 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:07:48.155 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:07:48.150 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:07:47.933 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:07:48.093 00:00:00.046 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:03:43.088 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-11-25 16:04:03.733 00:05:01.719 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 16:04:03.780 00:05:01.612 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 16:04:05.452 00:05:07.153 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 16:05:12.613 00:05:52.762 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 16:07:03.641 00:05:01.732 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 16:07:03.753 00:05:01.620 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 16:07:12.590 00:05:52.824 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 16:07:12.625 00:05:52.750 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 16:12:47.727 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.662 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.535 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.599 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.517 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:12:47.519 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:09:03.803 00:05:01.572 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 16:09:03.092 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2620 1 2025-11-25 16:10:03.736 00:05:01.719 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 16:10:03.783 00:05:01.612 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 16:10:05.455 00:05:07.151 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 16:11:12.611 00:05:52.764 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 16:13:03.643 00:05:01.732 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 16:13:03.756 00:05:01.619 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 16:17:47.772 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.856 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.652 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.816 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.736 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:17:47.563 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:13:12.591 00:05:52.823 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 16:13:12.626 00:05:52.749 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 16:14:23.097 00:05:00.956 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2560 1 2025-11-25 16:15:03.804 00:05:01.571 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 16:16:03.736 00:05:01.720 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 16:16:03.784 00:05:01.612 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 16:16:05.455 00:05:07.152 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 16:17:12.612 00:05:52.763 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 16:22:47.659 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:22:47.803 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:22:48.016 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:22:48.014 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.805 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.741 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:19:03.645 00:05:01.731 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 16:19:03.757 00:05:01.619 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 16:19:33.099 00:05:11.021 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2492 1 2025-11-25 16:19:12.593 00:05:52.823 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 16:19:12.626 00:05:52.750 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 16:21:03.807 00:05:01.570 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 16:22:03.736 00:05:01.721 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 16:22:03.785 00:05:01.611 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 16:22:05.455 00:05:07.154 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 16:27:48.116 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:27:48.175 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:27:48.385 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.205 00:00:00.050 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.080 00:00:00.042 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.196 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:23:12.612 00:05:52.764 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 16:24:53.099 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2468 1 2025-11-25 16:25:03.650 00:05:01.726 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 16:25:03.758 00:05:01.618 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 16:25:12.594 00:05:52.823 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 16:25:12.630 00:05:52.748 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 16:27:03.805 00:05:01.571 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 16:28:03.740 00:05:01.717 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 16:28:03.785 00:05:01.611 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 16:28:05.456 00:05:07.153 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 16:32:48.043 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:32:48.179 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:32:48.389 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:32:48.256 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:32:48.030 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:32:48.123 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:29:12.641 00:05:52.761 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 16:30:13.105 00:05:10.041 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2560 1 2025-11-25 16:31:03.652 00:05:01.750 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 16:31:03.761 00:05:01.642 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 16:31:12.629 00:05:52.773 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 16:31:12.607 00:05:52.836 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 16:33:03.808 00:05:01.595 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 16:37:48.014 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:37:48.016 00:00:00.049 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:37:48.226 00:00:00.050 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:37:48.216 00:00:00.036 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:37:48.093 00:00:00.043 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:37:48.095 00:00:00.041 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:34:03.741 00:05:01.742 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 16:34:03.788 00:05:01.635 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 16:34:05.457 00:05:07.155 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 16:35:33.114 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-11-25 16:35:12.627 00:05:52.776 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 16:37:03.652 00:05:01.751 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 16:37:03.762 00:05:01.641 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 16:37:12.630 00:05:52.773 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 16:37:12.608 00:05:52.836 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 16:42:48.373 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.137 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.187 00:00:00.029 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.290 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.211 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:42:48.164 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:39:03.810 00:05:01.595 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 16:40:03.744 00:05:01.740 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 16:40:03.794 00:05:01.630 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 16:40:05.483 00:05:07.132 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 16:40:53.122 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2848 1 2025-11-25 16:41:12.631 00:05:52.775 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 16:43:03.654 00:05:01.751 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 16:43:03.766 00:05:01.639 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 16:47:48.450 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:47:48.519 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:47:48.730 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.567 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.536 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.531 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:43:12.634 00:05:52.773 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 16:43:12.609 00:05:52.838 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 16:45:03.812 00:05:01.595 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 16:46:03.795 00:05:01.633 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 16:46:03.746 00:05:01.742 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 16:46:05.485 00:05:07.131 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 16:46:13.128 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2572 1 2025-11-25 16:47:12.632 00:05:52.776 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 16:52:48.446 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.442 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.324 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.317 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.237 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:52:48.236 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:49:03.657 00:05:01.751 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 16:49:03.767 00:05:01.641 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 16:49:12.612 00:05:52.838 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 16:49:12.636 00:05:52.773 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 16:51:03.816 00:05:01.594 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 16:51:33.134 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2432 1 2025-11-25 16:52:03.748 00:05:01.743 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 16:52:03.796 00:05:01.635 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 16:52:05.489 00:05:07.129 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 16:57:48.443 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.503 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.679 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.674 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.423 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 16:57:48.470 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 16:53:12.632 00:05:52.778 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 112380, total packets: 1692, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-11-25 15:55:03 - 2025-11-25 16:59:05 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0126s User: 0.0039s Wall: 0.0043s flows/second: 40410.7 Runtime: 0.0043s