Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 20:57:54.779 00:01:00.203 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 20:58:54.777 00:00:00.208 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 20:59:54.780 00:00:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:00:54.780 00:00:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 20:59:54.778 00:01:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:01:00.520 00:00:00.011 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:01:00.507 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:01:54.777 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:01:54.779 00:00:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:02:54.777 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:02:54.779 00:01:00.203 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:03:54.777 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:04:54.780 00:00:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:05:54.780 00:00:00.203 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:04:54.778 00:01:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:06:00.776 00:00:00.024 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:06:00.779 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:06:54.778 00:00:00.212 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:06:54.781 00:00:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:07:54.780 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:07:54.781 00:01:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:08:54.779 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:09:54.781 00:01:00.206 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:09:54.778 00:01:00.211 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:11:00.801 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:11:00.799 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:11:54.779 00:00:00.210 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:11:54.782 00:00:00.205 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:12:54.779 00:00:00.210 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:13:54.779 00:00:00.210 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:12:54.783 00:01:00.205 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:14:54.781 00:01:00.210 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:14:54.782 00:01:00.205 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:16:02.152 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:16:02.149 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:16:54.783 00:00:00.206 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:16:54.782 00:00:00.210 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:17:54.782 00:00:00.205 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:17:54.780 00:00:00.211 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:18:54.782 00:00:00.210 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:18:54.784 00:00:00.204 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:19:54.784 00:01:00.204 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:19:54.782 00:01:00.209 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:21:00.953 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:21:00.956 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:21:54.786 00:00:00.204 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:22:54.784 00:00:00.205 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:21:54.782 00:01:00.210 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:23:54.785 00:00:00.204 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:23:54.782 00:00:00.209 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:24:54.782 00:00:00.209 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:24:54.785 00:01:00.204 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:25:54.783 00:00:00.209 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:26:01.007 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:26:01.010 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:26:54.784 00:00:00.205 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:27:54.786 00:00:00.204 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:26:54.783 00:01:00.210 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:28:54.784 00:00:00.209 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:28:54.788 00:00:00.203 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:29:54.783 00:00:00.210 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:29:54.785 00:01:00.206 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:30:54.784 00:00:00.210 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:31:01.109 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:31:01.107 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:31:54.785 00:00:00.206 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:32:54.788 00:00:00.204 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:31:54.783 00:01:00.212 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:33:54.785 00:00:00.208 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:33:54.789 00:00:00.203 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:34:54.787 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:35:54.785 00:00:00.208 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:34:54.788 00:01:00.203 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:36:01.560 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:36:01.559 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:36:54.790 00:00:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:37:54.789 00:00:00.203 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:36:54.787 00:01:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:38:54.786 00:00:00.208 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:38:54.789 00:00:00.203 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:39:54.788 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:40:54.789 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:39:54.790 00:01:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:41:01.292 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:41:01.290 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:41:54.792 00:01:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:41:54.788 00:01:00.208 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:43:54.788 00:00:00.209 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:43:54.791 00:00:00.203 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:44:54.787 00:00:00.209 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:44:54.790 00:00:00.204 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:45:54.788 00:00:00.208 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:45:54.790 00:00:00.204 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:46:01.177 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:46:01.182 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:46:54.789 00:01:00.208 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:46:54.792 00:01:00.203 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:48:54.789 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:48:54.792 00:00:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:49:54.790 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:49:54.792 00:00:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:50:54.791 00:00:00.206 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:50:54.793 00:00:00.201 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:51:02.676 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:51:02.674 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:51:54.791 00:01:00.206 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:51:54.794 00:01:00.201 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:53:54.793 00:00:00.201 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:53:54.791 00:01:00.206 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-10-21 21:54:54.793 00:00:00.201 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:55:54.793 00:00:00.202 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-10-21 21:55:54.791 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:56:01.660 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-21 21:56:01.658 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-10-21 21:56:54.790 00:00:00.207 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-10-21 21:56:54.794 00:01:00.201 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-10-21 21:57:54.791 00:00:00.206 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 Summary: total flows: 117, total bytes: 20931, total packets: 314, avg bps: 46, avg pps: 0, avg bpp: 66 Time window: 2025-10-21 20:57:54 - 2025-10-21 21:57:54 Total flows processed: 117, passed: 117, Blocks skipped: 0, Bytes read: 12232 Sys: 0.0033s User: 0.0025s Wall: 0.0020s flows/second: 59634.7 Runtime: 0.0020s