Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 04:55:08.039 00:05:01.850 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 04:55:08.130 00:05:01.759 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 04:56:09.968 00:05:07.328 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 04:57:08.312 00:05:01.577 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 04:57:09.887 00:05:07.419 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 04:57:42.122 00:05:10.369 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2424 1 2025-12-05 04:58:08.112 00:05:01.856 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 04:58:08.291 00:05:01.617 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 04:58:09.888 00:05:07.431 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 05:02:22.803 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:02:22.698 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:02:23.014 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:02:23.064 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:02:23.093 00:00:00.032 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:02:22.777 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 04:59:09.933 00:05:07.357 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 05:01:08.040 00:05:01.849 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 05:01:08.132 00:05:01.757 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 05:02:09.968 00:05:07.332 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 05:03:08.313 00:05:01.576 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 05:03:02.126 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2500 1 2025-12-05 05:03:09.888 00:05:07.421 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 05:07:22.930 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:07:22.860 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:07:23.070 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:07:23.132 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:07:23.017 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:07:23.011 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:04:08.111 00:05:01.857 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 05:04:08.292 00:05:01.616 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 05:04:09.889 00:05:07.437 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 05:05:09.930 00:05:07.360 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 05:07:08.041 00:05:01.848 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 05:07:08.132 00:05:01.757 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 05:08:09.970 00:05:07.332 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 05:12:23.098 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:12:23.018 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:12:23.230 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:12:23.300 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:12:23.178 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:12:23.179 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:08:22.129 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 32 2176 1 2025-12-05 05:09:08.314 00:05:01.578 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 05:09:09.889 00:05:07.421 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 05:10:08.296 00:05:01.618 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 05:10:08.113 00:05:01.861 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 05:10:09.889 00:05:07.432 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 05:11:09.930 00:05:07.361 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 05:13:08.042 00:05:01.852 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 05:13:08.133 00:05:01.761 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 05:17:23.024 00:00:00.030 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:17:23.111 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:17:23.322 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:17:23.236 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:17:23.195 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:17:23.103 00:00:00.031 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:13:42.132 00:05:10.062 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2672 1 2025-12-05 05:14:09.972 00:05:07.330 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 05:15:08.316 00:05:01.578 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 05:15:09.894 00:05:07.421 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 05:16:08.113 00:05:01.862 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 05:16:08.295 00:05:01.620 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 05:16:09.894 00:05:07.429 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 05:17:09.934 00:05:07.359 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 05:22:23.415 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:22:23.413 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:22:23.256 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:22:23.246 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:22:23.336 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:22:23.204 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:19:08.043 00:05:01.852 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 05:19:08.133 00:05:01.762 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 05:19:02.135 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2792 1 2025-12-05 05:20:09.973 00:05:07.330 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 05:21:08.320 00:05:01.578 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 05:21:09.896 00:05:07.418 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 05:22:08.116 00:05:01.861 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 05:22:08.299 00:05:01.617 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 05:22:09.895 00:05:07.429 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 05:23:09.936 00:05:07.359 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 05:27:23.441 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:27:23.439 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:27:23.314 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:27:23.375 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:27:23.295 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:27:23.231 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:24:22.140 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2424 1 2025-12-05 05:25:08.044 00:05:01.856 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 05:25:08.137 00:05:01.763 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 05:26:09.977 00:05:07.329 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 05:27:08.319 00:05:01.580 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 05:27:09.897 00:05:07.419 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 05:28:08.117 00:05:01.864 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 05:28:08.300 00:05:01.620 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 05:28:09.897 00:05:07.429 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 05:32:23.328 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:32:23.406 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:32:23.618 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:32:23.613 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:32:23.434 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:32:23.409 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:29:09.938 00:05:07.357 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 05:29:42.145 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2580 1 2025-12-05 05:31:08.046 00:05:01.857 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 05:31:08.139 00:05:01.764 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 05:32:09.980 00:05:07.327 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 05:33:08.321 00:05:01.582 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 05:33:09.899 00:05:07.418 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 05:37:23.700 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:37:23.763 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:37:23.896 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:37:23.641 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:37:23.620 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:37:23.553 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:34:08.119 00:05:01.864 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 05:34:08.300 00:05:01.622 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 05:34:09.900 00:05:07.428 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 05:35:02.154 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 32 2176 1 2025-12-05 05:35:09.940 00:05:07.357 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 05:37:08.047 00:05:01.856 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 05:37:08.140 00:05:01.764 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 05:38:09.983 00:05:07.326 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 05:42:23.576 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:42:23.579 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:42:23.905 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:42:23.705 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:42:23.656 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:42:23.789 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:39:08.321 00:05:01.583 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 05:39:09.902 00:05:07.416 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 05:40:08.119 00:05:01.864 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 05:40:08.300 00:05:01.623 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 05:40:09.904 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 05:40:22.163 00:05:10.019 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2640 1 2025-12-05 05:41:09.944 00:05:07.355 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 05:43:08.048 00:05:01.856 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 05:43:08.140 00:05:01.764 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 05:47:23.751 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:47:23.751 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:47:23.960 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:47:23.882 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:47:23.889 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:47:23.829 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:44:09.985 00:05:07.326 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 05:45:08.323 00:05:01.583 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 05:45:09.903 00:05:07.416 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 05:45:42.169 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2676 1 2025-12-05 05:46:08.123 00:05:01.863 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 05:46:08.303 00:05:01.623 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 05:46:09.903 00:05:07.426 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 05:47:09.943 00:05:07.356 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 05:52:23.847 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:52:23.792 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 05:52:24.006 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:52:24.137 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:52:23.802 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:52:23.928 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:49:08.081 00:05:01.824 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 05:49:08.142 00:05:01.763 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 05:50:09.984 00:05:07.325 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 05:51:08.323 00:05:01.582 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 05:51:02.172 00:05:10.011 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2572 1 2025-12-05 05:51:09.905 00:05:07.416 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 05:52:08.124 00:05:01.864 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 05:52:08.303 00:05:01.625 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 05:52:09.905 00:05:07.426 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 05:53:09.944 00:05:07.356 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 05:57:24.142 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:57:24.085 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:57:23.958 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:57:24.011 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 05:57:23.930 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 05:57:23.931 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112196, total packets: 1691, avg bps: 236, avg pps: 0, avg bpp: 66 Time window: 2025-12-05 04:55:08 - 2025-12-05 05:58:17 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0051s User: 0.0010s Wall: 0.0023s flows/second: 76212.0 Runtime: 0.0023s