Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 01:58:44.849 00:01:00.031 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-01 01:59:44.878 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:00:44.852 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:00:44.878 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:01:00.216 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:01:00.219 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:01:44.851 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:01:44.879 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:02:44.851 00:00:00.031 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:02:44.878 00:01:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-10-01 02:03:44.852 00:01:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-01 02:04:44.879 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:05:44.880 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:05:44.853 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:05:59.832 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:05:59.836 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:06:44.878 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:06:44.854 00:00:00.028 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:07:44.854 00:00:00.028 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:07:44.880 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:08:44.880 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:08:44.853 00:01:00.029 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-01 02:09:44.880 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:10:44.879 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:10:44.854 00:00:00.029 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:11:00.281 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:11:00.279 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:11:44.883 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:11:44.855 00:00:00.032 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:12:44.884 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:12:44.855 00:00:00.032 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:13:44.856 00:00:00.031 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:13:44.883 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:14:44.854 00:00:00.031 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:14:44.882 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:15:44.857 00:00:00.031 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:15:44.886 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:16:00.313 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:16:00.312 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:16:44.857 00:00:00.033 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:16:44.889 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:17:44.857 00:00:00.033 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:17:44.889 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:18:44.858 00:00:00.033 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:18:44.888 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:19:44.858 00:00:00.033 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:19:44.888 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:20:44.858 00:00:00.033 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:20:44.889 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:21:00.496 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:21:00.499 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:21:44.860 00:00:00.032 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:21:44.889 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:22:44.890 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:22:44.861 00:00:00.031 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:23:44.889 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:23:44.861 00:00:00.031 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:24:44.860 00:00:00.031 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:24:44.889 00:01:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-10-01 02:26:00.599 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:26:00.597 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:25:44.863 00:01:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-01 02:26:44.890 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:27:44.863 00:00:00.029 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:27:44.890 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:28:44.864 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:28:44.889 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:29:44.863 00:00:00.029 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:29:44.891 00:01:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-10-01 02:31:00.578 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:31:00.581 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:30:44.866 00:01:00.034 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-01 02:31:44.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:32:44.867 00:00:00.032 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:32:44.897 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:33:44.868 00:00:00.032 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:33:44.897 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:34:44.870 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:34:44.896 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-10-01 02:36:00.713 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:36:00.716 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:35:44.869 00:01:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-01 02:36:44.897 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:37:44.869 00:00:00.031 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:37:44.896 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:38:44.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:38:44.871 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:39:44.870 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:39:44.898 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-10-01 02:41:01.175 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:41:01.178 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:40:44.871 00:01:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-01 02:41:44.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:42:44.897 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:42:44.871 00:00:00.029 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:43:44.897 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:43:44.871 00:00:00.029 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:44:44.871 00:00:00.029 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:44:44.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:45:44.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:46:00.971 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:46:00.968 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:45:44.872 00:01:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-01 02:46:44.900 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:47:44.873 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:47:44.901 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:48:44.899 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:48:44.873 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:49:44.900 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:49:44.873 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:50:44.901 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:50:44.873 00:00:00.029 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:51:00.699 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:51:00.701 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:51:44.901 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:51:44.872 00:00:00.030 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:52:44.873 00:00:00.034 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:52:44.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:53:44.904 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:53:44.875 00:00:00.032 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:54:44.904 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:54:44.873 00:00:00.033 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:55:44.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:55:44.874 00:00:00.033 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:56:01.072 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-01 02:56:01.075 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-01 02:56:44.907 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:56:44.875 00:00:00.036 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:57:44.904 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:57:44.873 00:00:00.034 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-01 02:58:44.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-10-01 02:58:44.874 00:00:00.033 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 Summary: total flows: 132, total bytes: 17811, total packets: 254, avg bps: 39, avg pps: 0, avg bpp: 70 Time window: 2025-10-01 01:58:44 - 2025-10-01 02:58:44 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0039s User: 0.0010s Wall: 0.0023s flows/second: 58070.9 Runtime: 0.0023s