Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 03:55:08.029 00:05:01.840 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 03:55:08.112 00:05:01.757 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 03:56:09.949 00:05:07.326 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 03:57:08.292 00:05:01.578 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 03:57:09.868 00:05:07.425 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 03:58:08.272 00:05:01.618 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 03:58:08.092 00:05:01.857 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 03:58:09.870 00:05:07.426 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 04:02:21.681 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:02:21.768 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:02:21.646 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:02:21.727 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:02:21.470 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:02:21.647 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 03:59:02.057 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2424 1 2025-12-05 03:59:09.910 00:05:07.364 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 04:01:08.031 00:05:01.840 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 04:01:08.114 00:05:01.757 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 04:02:09.950 00:05:07.325 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 04:03:08.294 00:05:01.578 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 04:07:21.931 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:07:21.768 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:07:21.844 00:00:00.031 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:07:21.723 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:03:09.870 00:05:07.424 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 04:07:21.643 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:07:21.721 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:04:08.094 00:05:01.857 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 04:04:08.273 00:05:01.618 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 04:04:09.871 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 04:04:22.060 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2564 1 2025-12-05 04:05:09.911 00:05:07.363 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 04:07:08.031 00:05:01.843 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 04:07:08.118 00:05:01.756 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 04:12:21.954 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:12:21.915 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:08:09.954 00:05:07.324 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 04:12:22.126 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:12:22.066 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:12:21.999 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:12:22.035 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:09:08.294 00:05:01.581 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 04:09:09.871 00:05:07.425 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 04:09:42.069 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 32 2176 1 2025-12-05 04:10:08.098 00:05:01.858 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 04:10:08.273 00:05:01.622 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 04:10:09.873 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 04:11:09.913 00:05:07.364 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 04:13:08.032 00:05:01.844 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 04:13:08.118 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 04:17:22.032 00:00:00.031 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:17:21.934 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:17:21.909 00:00:00.029 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:17:21.969 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:17:21.889 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:17:21.822 00:00:00.031 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:14:09.955 00:05:07.324 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 04:15:08.295 00:05:01.583 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 04:15:02.073 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2640 1 2025-12-05 04:15:09.876 00:05:07.421 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 04:16:08.102 00:05:01.857 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 04:16:08.275 00:05:01.624 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 04:16:09.875 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 04:17:09.916 00:05:07.362 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 04:22:21.961 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:22:21.956 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:22:22.167 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:22:22.152 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:22:22.040 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:22:22.042 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:19:08.032 00:05:01.846 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 04:19:08.120 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 04:20:09.958 00:05:07.325 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 04:20:22.083 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2852 1 2025-12-05 04:21:08.296 00:05:01.582 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 04:21:09.878 00:05:07.421 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 04:22:08.100 00:05:01.858 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 04:22:08.275 00:05:01.623 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 04:22:09.878 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 04:23:09.918 00:05:07.361 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 04:27:22.177 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:27:22.226 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:27:22.258 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:27:22.438 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:27:22.419 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:27:22.097 00:00:00.047 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:25:08.032 00:05:01.847 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 04:25:08.122 00:05:01.757 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 04:25:42.090 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2444 1 2025-12-05 04:26:09.959 00:05:07.327 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 04:27:08.297 00:05:01.583 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 04:27:09.879 00:05:07.421 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 04:28:08.279 00:05:01.623 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 04:28:08.105 00:05:01.857 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 04:28:09.878 00:05:07.429 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 04:32:22.158 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:32:22.162 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:32:22.375 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:32:22.433 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:32:22.314 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:32:22.241 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:29:09.920 00:05:07.361 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 04:31:08.033 00:05:01.849 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 04:31:02.098 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2616 1 2025-12-05 04:31:08.124 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 04:32:09.960 00:05:07.329 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 04:33:08.299 00:05:01.584 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 04:33:09.881 00:05:07.421 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 04:37:22.603 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:37:22.505 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:37:22.445 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:37:22.656 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:37:22.585 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:37:22.814 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:34:08.104 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 04:34:08.281 00:05:01.621 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 04:34:09.881 00:05:07.428 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 04:35:09.922 00:05:07.359 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 04:36:22.105 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2308 1 2025-12-05 04:37:08.035 00:05:01.847 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 04:37:08.124 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 04:38:09.962 00:05:07.328 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 04:42:22.643 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:42:22.409 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:42:22.519 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:42:22.532 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:42:22.438 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:42:22.322 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:39:08.301 00:05:01.582 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 04:39:09.882 00:05:07.421 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 04:40:08.281 00:05:01.622 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 04:40:08.105 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 04:40:09.883 00:05:07.427 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 04:41:09.923 00:05:07.361 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 04:41:42.109 00:05:10.022 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2336 1 2025-12-05 04:43:08.035 00:05:01.849 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 04:43:08.125 00:05:01.759 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 04:47:22.881 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:47:22.878 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:47:22.669 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:47:22.753 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:47:22.672 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:47:22.674 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:44:09.965 00:05:07.327 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 04:45:08.305 00:05:01.581 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 04:45:09.883 00:05:07.422 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 04:46:08.106 00:05:01.860 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 04:46:08.285 00:05:01.620 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 04:46:09.884 00:05:07.427 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 04:47:02.113 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2840 1 2025-12-05 04:47:09.926 00:05:07.359 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 04:52:22.721 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:52:22.655 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 04:52:22.865 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:52:22.792 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:52:22.747 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:52:22.801 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:49:08.037 00:05:01.849 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 04:49:08.129 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 04:50:09.966 00:05:07.328 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 04:51:08.305 00:05:01.583 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 04:51:09.886 00:05:07.420 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 04:52:08.110 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 04:52:08.286 00:05:01.622 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 04:52:09.886 00:05:07.428 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 04:52:22.116 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2676 1 2025-12-05 04:53:09.925 00:05:07.360 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 04:57:23.061 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:57:22.867 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:57:22.803 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:57:22.629 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:57:22.548 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 04:57:22.850 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112440, total packets: 1695, avg bps: 237, avg pps: 0, avg bpp: 66 Time window: 2025-12-05 03:55:08 - 2025-12-05 04:58:17 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0032s User: 0.0032s Wall: 0.0025s flows/second: 68785.2 Runtime: 0.0025s