Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 09:55:03.983 00:05:01.769 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-26 09:55:04.061 00:05:01.691 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-26 09:55:05.761 00:05:07.293 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-26 09:55:12.965 00:05:52.827 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-26 09:57:04.147 00:05:01.604 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-26 09:58:04.041 00:05:01.791 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-26 09:58:04.127 00:05:01.645 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-26 09:58:05.831 00:05:07.202 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-26 09:58:54.576 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2620 1 2025-11-26 10:03:09.378 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:03:09.314 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:03:09.195 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:03:09.188 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:03:09.108 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:03:09.168 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 09:59:12.985 00:05:52.768 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-26 10:01:03.983 00:05:01.769 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-26 10:01:04.061 00:05:01.691 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-26 10:01:05.751 00:05:07.302 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-26 10:01:12.965 00:05:52.827 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-26 10:03:04.149 00:05:01.604 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-26 10:04:04.043 00:05:01.790 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-26 10:08:09.550 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:08:09.546 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:04:04.129 00:05:01.644 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-26 10:08:09.350 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:08:09.418 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:08:09.337 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:08:09.340 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:04:05.832 00:05:07.205 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-26 10:04:14.586 00:05:10.015 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2384 1 2025-11-26 10:05:12.986 00:05:52.766 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-26 10:07:03.984 00:05:01.769 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-26 10:07:04.063 00:05:01.690 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-26 10:07:05.754 00:05:07.306 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-26 10:07:12.968 00:05:52.826 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-26 10:13:09.195 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:13:09.184 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:13:09.235 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:13:09.229 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:13:09.149 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:09:04.149 00:05:01.603 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-26 10:13:08.984 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:09:34.600 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2496 1 2025-11-26 10:10:04.045 00:05:01.791 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-26 10:10:04.130 00:05:01.646 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-26 10:10:05.834 00:05:07.206 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-26 10:11:12.988 00:05:52.767 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-26 10:13:03.987 00:05:01.769 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-26 10:13:04.066 00:05:01.690 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-26 10:13:05.753 00:05:07.307 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-26 10:18:09.046 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:18:09.046 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:18:09.256 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:18:09.408 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:18:09.342 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:13:12.971 00:05:52.825 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-26 10:18:09.126 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:15:04.156 00:05:01.600 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-26 10:14:54.610 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2832 1 2025-11-26 10:16:04.136 00:05:01.640 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-26 10:16:04.046 00:05:01.794 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-26 10:16:05.836 00:05:07.205 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-26 10:17:12.994 00:05:52.762 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-26 10:23:09.519 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:23:09.651 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:23:09.398 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:23:09.550 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:23:09.470 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:19:03.986 00:05:01.770 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-26 10:19:04.066 00:05:01.690 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-26 10:23:09.309 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:19:05.755 00:05:07.306 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-26 10:19:12.974 00:05:52.823 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-26 10:20:14.618 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2420 1 2025-11-26 10:21:04.156 00:05:01.600 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-26 10:22:04.046 00:05:01.792 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-26 10:22:04.136 00:05:01.641 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-26 10:22:05.836 00:05:07.206 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-26 10:28:09.851 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:28:09.695 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:28:09.768 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:28:09.725 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:23:12.995 00:05:52.764 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-26 10:28:09.645 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:28:09.640 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:25:03.987 00:05:01.772 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-26 10:25:04.069 00:05:01.690 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-26 10:25:05.757 00:05:07.306 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-26 10:25:34.622 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2620 1 2025-11-26 10:25:12.976 00:05:52.824 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-26 10:27:04.158 00:05:01.603 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-26 10:28:04.062 00:05:01.779 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-26 10:28:04.139 00:05:01.642 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-26 10:28:05.838 00:05:07.210 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-26 10:33:09.886 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:33:09.765 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:33:09.643 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:33:09.627 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:33:09.547 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:33:09.676 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:29:12.997 00:05:52.764 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-26 10:30:54.634 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2304 1 2025-11-26 10:31:03.988 00:05:01.773 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-26 10:31:04.096 00:05:01.665 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-26 10:31:05.759 00:05:07.307 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-26 10:31:12.977 00:05:52.827 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-26 10:33:04.160 00:05:01.602 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-26 10:38:09.697 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:38:09.697 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:38:09.908 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:38:09.906 00:00:00.014 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:34:04.140 00:05:01.642 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-26 10:38:09.839 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:38:09.777 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:34:04.082 00:05:01.760 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-26 10:34:05.840 00:05:07.207 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-26 10:35:13.000 00:05:52.762 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-26 10:36:14.639 00:05:10.054 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2512 1 2025-11-26 10:37:03.990 00:05:01.771 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-26 10:37:04.102 00:05:01.660 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-26 10:37:05.761 00:05:07.306 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-26 10:37:12.980 00:05:52.824 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-26 10:43:09.641 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:39:04.161 00:05:01.603 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-26 10:43:09.550 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:43:09.761 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:43:09.955 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:43:09.641 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:43:09.722 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:40:04.084 00:05:01.760 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-26 10:40:04.140 00:05:01.643 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-26 10:40:05.843 00:05:07.215 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-26 10:41:34.646 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2668 1 2025-11-26 10:41:12.999 00:05:52.764 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-26 10:43:03.992 00:05:01.772 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-26 10:43:04.104 00:05:01.660 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-26 10:43:05.763 00:05:07.336 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-26 10:48:09.850 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:48:09.975 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:43:12.979 00:05:52.825 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-26 10:48:09.821 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:48:09.741 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:48:09.639 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:48:10.149 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:45:04.162 00:05:01.603 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-26 10:46:04.085 00:05:01.762 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-26 10:46:04.141 00:05:01.646 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-26 10:46:05.845 00:05:07.237 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-26 10:46:45.274 00:05:09.380 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2640 1 2025-11-26 10:47:13.001 00:05:52.765 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-26 10:49:03.994 00:05:01.773 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-26 10:49:04.110 00:05:01.657 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-26 10:53:10.367 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:53:10.500 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:53:10.245 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:53:10.368 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:53:10.289 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:49:05.764 00:05:07.337 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-26 10:53:10.158 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:49:12.980 00:05:52.827 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-26 10:51:04.162 00:05:01.605 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-26 10:52:04.142 00:05:01.645 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-26 10:52:04.093 00:05:01.754 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-26 10:52:05.846 00:05:07.234 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-26 10:52:04.654 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2508 1 2025-11-26 10:53:13.002 00:05:52.767 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-26 10:58:09.979 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 10:58:09.976 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-26 10:58:10.186 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:58:09.988 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:58:10.060 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-26 10:58:10.187 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 Summary: total flows: 173, total bytes: 112568, total packets: 1693, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-11-26 09:55:03 - 2025-11-26 10:59:05 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0040s User: 0.0020s Wall: 0.0018s flows/second: 95275.0 Runtime: 0.0018s