Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 01:55:07.984 00:05:01.857 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 01:55:08.032 00:05:01.810 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 01:56:09.922 00:05:07.323 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 01:56:41.877 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2804 1 2025-12-05 01:57:08.243 00:05:01.601 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 01:57:09.842 00:05:07.412 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 01:58:08.013 00:05:01.910 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 01:58:08.223 00:05:01.640 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:02:19.554 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:02:19.381 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:02:19.424 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:02:19.368 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:02:19.287 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 01:58:09.841 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:02:19.343 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 01:59:09.882 00:05:07.352 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:01:07.985 00:05:01.858 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:01:08.033 00:05:01.810 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:02:01.880 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2432 1 2025-12-05 02:02:09.923 00:05:07.322 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:03:08.243 00:05:01.600 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:03:09.842 00:05:07.412 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:07:19.479 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:07:19.410 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:07:19.622 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:07:19.615 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:07:19.394 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:07:19.561 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:04:08.015 00:05:01.909 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:04:08.224 00:05:01.640 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:04:09.843 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:05:09.882 00:05:07.353 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:07:07.987 00:05:01.857 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:07:08.036 00:05:01.808 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:07:21.883 00:05:10.013 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2568 1 2025-12-05 02:12:19.273 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:12:19.526 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:12:19.738 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:12:19.575 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:12:19.359 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:08:09.925 00:05:07.321 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:12:19.355 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:09:08.248 00:05:01.597 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:09:09.843 00:05:07.412 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:10:08.017 00:05:01.909 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:10:08.228 00:05:01.637 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:10:09.844 00:05:07.422 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:11:09.884 00:05:07.352 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:12:41.897 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2372 1 2025-12-05 02:13:07.988 00:05:01.857 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:13:08.037 00:05:01.809 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:17:19.912 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:17:19.922 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:17:19.842 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:17:19.833 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:17:20.044 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:17:20.029 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:14:09.925 00:05:07.322 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:15:08.251 00:05:01.594 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:15:09.845 00:05:07.412 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:16:08.232 00:05:01.634 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:16:08.018 00:05:01.908 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:16:09.845 00:05:07.424 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:17:09.885 00:05:07.353 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:18:01.901 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2256 1 2025-12-05 02:22:20.617 00:00:00.026 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:22:20.600 00:00:00.032 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:22:20.811 00:00:00.032 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:22:20.786 00:00:00.026 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:22:20.605 00:00:00.034 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:22:20.698 00:00:00.026 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:19:07.999 00:05:01.847 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:19:08.040 00:05:01.806 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:20:09.927 00:05:07.326 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:21:08.252 00:05:01.594 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:21:09.846 00:05:07.413 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:22:08.234 00:05:01.634 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:22:08.021 00:05:01.907 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:22:09.845 00:05:07.427 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:27:19.677 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:27:19.674 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:23:09.887 00:05:07.353 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:27:19.755 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:27:19.888 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:27:19.673 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:27:20.037 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:23:21.911 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2704 1 2025-12-05 02:25:08.004 00:05:01.843 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:25:08.040 00:05:01.807 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:26:09.926 00:05:07.327 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:27:08.255 00:05:01.593 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:27:09.847 00:05:07.414 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:28:08.021 00:05:01.906 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:28:08.234 00:05:01.633 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:32:19.742 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:28:09.846 00:05:07.428 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:32:19.799 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:32:19.885 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:32:19.823 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:32:20.011 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:32:20.007 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:28:41.921 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2772 1 2025-12-05 02:29:09.887 00:05:07.354 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:31:08.005 00:05:01.843 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:31:08.044 00:05:01.804 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:32:09.927 00:05:07.328 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:33:08.255 00:05:01.593 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:37:19.975 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:37:19.686 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:37:19.966 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:33:09.846 00:05:07.415 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:37:19.885 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:37:19.765 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:37:20.091 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:34:08.025 00:05:01.905 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:34:08.236 00:05:01.633 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:34:01.928 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2424 1 2025-12-05 02:34:09.848 00:05:07.428 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:35:09.888 00:05:07.355 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:37:08.045 00:05:01.805 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:37:08.005 00:05:01.845 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:38:09.927 00:05:07.328 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:42:20.093 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:42:20.003 00:00:00.045 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:42:20.212 00:00:00.046 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:42:20.208 00:00:00.044 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:42:19.992 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:42:20.175 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:39:08.255 00:05:01.594 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:39:09.848 00:05:07.419 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:39:21.932 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2520 1 2025-12-05 02:40:08.025 00:05:01.905 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:40:08.236 00:05:01.634 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:40:09.848 00:05:07.430 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:41:09.889 00:05:07.358 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:43:08.005 00:05:01.845 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:43:08.044 00:05:01.806 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:47:20.058 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:47:20.131 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:47:20.140 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:47:20.343 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:47:20.223 00:00:00.040 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:47:20.220 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:44:09.931 00:05:07.328 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:44:41.938 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 32 2176 1 2025-12-05 02:45:08.263 00:05:01.588 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:45:09.850 00:05:07.419 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:46:08.245 00:05:01.628 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:46:08.025 00:05:01.908 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:46:09.850 00:05:07.428 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:47:09.891 00:05:07.358 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:52:20.411 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:52:20.340 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:52:20.224 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:52:20.280 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:52:20.200 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:52:20.200 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:49:08.007 00:05:01.848 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:49:08.046 00:05:01.809 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:50:01.942 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2696 1 2025-12-05 02:50:09.932 00:05:07.326 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:51:08.267 00:05:01.588 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:51:09.854 00:05:07.417 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:52:08.026 00:05:01.909 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:52:08.245 00:05:01.630 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:52:09.852 00:05:07.426 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:53:09.893 00:05:07.357 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:57:20.660 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:57:20.597 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:57:20.295 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:57:20.631 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:57:20.550 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:57:20.448 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112288, total packets: 1694, avg bps: 237, avg pps: 0, avg bpp: 66 Time window: 2025-12-05 01:55:07 - 2025-12-05 02:58:17 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0025s User: 0.0025s Wall: 0.0022s flows/second: 77539.5 Runtime: 0.0022s