Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-06 01:55:08.503 00:05:01.810 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-06 01:55:08.513 00:05:01.800 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-06 01:55:17.713 00:05:52.681 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-06 01:56:17.726 00:05:52.588 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-06 01:57:08.716 00:05:01.598 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-06 01:58:08.492 00:05:01.901 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-06 01:58:08.696 00:05:01.637 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-06 01:58:10.311 00:05:07.422 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-06 02:02:48.148 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:02:48.103 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:02:48.229 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:02:48.314 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:02:48.204 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:02:48.071 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 01:58:17.705 00:05:52.648 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-06 01:59:53.865 00:05:10.007 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2556 1 2025-12-06 02:01:08.503 00:05:01.811 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-06 02:01:08.513 00:05:01.801 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-06 02:01:17.714 00:05:52.682 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-06 02:02:17.726 00:05:52.588 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-06 02:03:08.717 00:05:01.597 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-06 02:07:48.201 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:07:47.917 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:07:48.127 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:07:48.402 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:07:48.293 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:07:48.280 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:04:08.497 00:05:01.901 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-06 02:04:08.698 00:05:01.640 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-06 02:04:10.313 00:05:07.426 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-06 02:04:17.707 00:05:52.650 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-06 02:05:13.873 00:05:10.010 OSPF 27.0.10.2:0 -> 224.0.0.5:0 32 2176 1 2025-12-06 02:07:08.510 00:05:01.811 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-06 02:07:08.515 00:05:01.806 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-06 02:07:17.715 00:05:52.686 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-06 02:12:48.436 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:12:48.410 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:12:48.620 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:12:48.602 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:12:48.334 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:12:48.517 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:08:17.728 00:05:52.592 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-06 02:09:08.718 00:05:01.602 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-06 02:10:08.495 00:05:01.906 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-06 02:10:08.699 00:05:01.641 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-06 02:10:10.317 00:05:07.420 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-06 02:10:33.883 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 39 2720 1 2025-12-06 02:10:17.709 00:05:52.652 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-06 02:13:08.510 00:05:01.811 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-06 02:13:08.516 00:05:01.805 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-06 02:17:48.315 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:17:48.193 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:17:48.404 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:17:48.508 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:17:48.456 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:17:48.396 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:13:17.719 00:05:52.683 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-06 02:14:17.733 00:05:52.588 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-06 02:15:08.719 00:05:01.602 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-06 02:15:53.891 00:05:00.528 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2460 1 2025-12-06 02:16:08.699 00:05:01.643 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-06 02:16:08.497 00:05:01.906 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-06 02:16:10.321 00:05:07.419 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-06 02:16:17.714 00:05:52.648 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-06 02:22:48.557 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:22:48.557 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:22:48.767 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:22:48.762 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:22:48.642 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:22:48.637 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:19:08.513 00:05:01.810 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-06 02:19:08.518 00:05:01.805 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-06 02:19:17.719 00:05:52.684 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-06 02:21:03.901 00:05:00.583 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2564 1 2025-12-06 02:20:17.736 00:05:52.588 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-06 02:21:08.720 00:05:01.604 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-06 02:22:08.501 00:05:01.904 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-06 02:22:08.701 00:05:01.643 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-06 02:22:10.322 00:05:07.421 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-06 02:22:17.717 00:05:52.649 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-06 02:27:48.584 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:27:48.511 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:27:48.794 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:27:48.788 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:27:48.600 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:27:48.592 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:25:08.515 00:05:01.810 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-06 02:25:08.521 00:05:01.804 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-06 02:25:17.725 00:05:52.680 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-06 02:26:13.909 00:05:00.635 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2356 1 2025-12-06 02:26:17.738 00:05:52.586 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-06 02:27:08.720 00:05:01.604 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-06 02:28:08.501 00:05:01.903 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-06 02:28:08.700 00:05:01.644 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-06 02:28:10.326 00:05:07.419 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-06 02:32:48.937 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:32:49.104 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:32:49.316 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:32:49.028 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:32:48.970 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:32:49.019 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:28:17.718 00:05:52.646 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-06 02:31:08.517 00:05:01.808 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-06 02:31:08.521 00:05:01.804 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-06 02:31:23.919 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2372 1 2025-12-06 02:31:17.726 00:05:52.680 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-06 02:32:17.739 00:05:52.586 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-06 02:33:08.723 00:05:01.602 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-06 02:37:49.061 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:37:49.102 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:37:48.876 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:37:48.928 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:37:48.847 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:37:48.850 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:34:08.501 00:05:01.905 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-06 02:34:08.703 00:05:01.643 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-06 02:34:10.325 00:05:07.422 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-06 02:34:17.719 00:05:52.646 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-06 02:36:43.922 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2336 1 2025-12-06 02:37:08.517 00:05:01.809 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-06 02:37:08.522 00:05:01.804 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-06 02:37:17.725 00:05:52.682 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-06 02:42:48.902 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:42:48.898 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:42:49.112 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:42:49.111 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:42:48.884 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:42:48.978 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:38:17.740 00:05:52.587 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-06 02:39:08.726 00:05:01.601 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-06 02:40:08.707 00:05:01.642 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-06 02:40:08.503 00:05:01.906 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-06 02:40:10.325 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-06 02:40:17.720 00:05:52.649 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-06 02:42:03.928 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2784 1 2025-12-06 02:43:08.519 00:05:01.810 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-06 02:43:08.523 00:05:01.806 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-06 02:47:48.967 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:47:48.977 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:47:49.189 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:47:49.182 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:47:48.917 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:47:49.048 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:43:17.729 00:05:52.681 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-06 02:44:17.741 00:05:52.588 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-06 02:45:08.727 00:05:01.602 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-06 02:46:08.505 00:05:01.906 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-06 02:46:08.708 00:05:01.642 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-06 02:46:10.329 00:05:07.421 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-06 02:46:17.722 00:05:52.648 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-06 02:47:23.934 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2568 1 2025-12-06 02:52:49.137 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:52:49.205 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-06 02:52:49.217 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:52:49.415 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:52:49.289 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:52:49.318 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:49:08.520 00:05:01.809 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-06 02:49:08.523 00:05:01.806 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-06 02:49:17.729 00:05:52.681 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-06 02:50:17.745 00:05:52.585 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-06 02:51:08.735 00:05:01.595 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-06 02:52:08.505 00:05:01.907 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-06 02:52:08.712 00:05:01.640 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-06 02:52:10.330 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-06 02:52:43.936 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2432 1 2025-12-06 02:52:17.726 00:05:52.645 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-06 02:57:49.286 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:57:49.547 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:57:49.142 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:57:49.395 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-06 02:57:49.315 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 02:57:49.076 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 111888, total packets: 1689, avg bps: 236, avg pps: 0, avg bpp: 66 Time window: 2025-12-06 01:55:08 - 2025-12-06 02:58:10 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0059s User: 0.0012s Wall: 0.0031s flows/second: 56569.3 Runtime: 0.0031s