Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 03:59:09.810 00:00:00.010 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 03:59:09.818 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:00:09.811 00:00:00.010 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:00:06.812 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:00:09.818 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:00:06.810 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:01:09.819 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 04:01:09.810 00:01:00.010 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 04:03:09.811 00:00:00.011 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:03:09.819 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:04:09.818 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:04:09.812 00:00:00.010 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:05:09.819 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:05:06.720 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:05:09.811 00:00:00.010 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:05:06.722 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:06:09.812 00:00:00.010 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:06:09.819 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 04:07:09.812 00:00:00.011 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:08:09.821 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:08:09.813 00:01:00.010 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 04:09:09.819 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:10:09.812 00:00:00.010 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:10:07.142 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:10:09.820 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:10:07.139 00:00:00.024 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:11:09.813 00:00:00.011 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:11:09.820 00:01:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 04:12:09.814 00:00:00.010 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:13:09.821 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:13:09.815 00:01:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 04:14:09.821 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:15:09.823 00:00:00.041 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:15:07.198 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:15:09.822 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:15:07.201 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:16:09.818 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:17:09.819 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:16:09.821 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 04:18:09.821 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:18:09.819 00:01:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 04:19:09.821 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:20:09.820 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:20:07.035 00:00:00.032 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:20:09.821 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:20:07.031 00:00:00.033 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:21:09.821 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:22:09.820 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:21:09.822 00:01:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 04:23:09.824 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:24:09.824 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:23:09.821 00:01:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 04:25:09.820 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:25:07.309 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:25:09.824 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:25:07.306 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:26:09.822 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:26:09.825 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 04:27:09.824 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:27:09.826 00:00:00.041 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:28:09.823 00:01:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 04:28:09.826 00:01:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 04:30:09.827 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:30:07.346 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:30:09.825 00:00:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:30:07.343 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:31:09.826 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:31:09.828 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:32:09.829 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 04:32:09.825 00:00:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:33:09.828 00:01:00.001 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 04:33:09.825 00:01:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 04:35:09.826 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:35:07.630 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:35:09.828 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:35:07.632 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:36:09.829 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:36:09.827 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:37:09.829 00:00:00.001 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:37:09.828 00:00:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:38:09.830 00:00:00.001 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:38:09.828 00:01:00.007 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 04:39:09.831 00:00:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:40:09.828 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:40:07.524 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:40:07.527 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:41:09.829 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:40:09.831 00:01:00.001 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 142 1 2025-11-20 04:42:09.833 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 04:42:09.829 00:00:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:43:09.832 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 04:43:09.830 00:01:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 04:44:09.833 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 2025-11-20 04:45:09.831 00:00:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:45:07.575 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:45:07.578 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:45:09.832 00:01:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 04:46:09.832 00:00:00.003 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:47:09.833 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:47:09.832 00:00:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:48:09.836 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:49:09.835 00:00:00.042 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:48:09.834 00:01:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 04:50:09.835 00:00:00.003 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:50:07.619 00:00:00.025 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:50:07.621 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:50:09.835 00:01:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 04:51:09.834 00:00:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:52:09.835 00:00:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:52:09.836 00:00:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:53:09.836 00:00:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:53:09.836 00:01:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 04:54:09.837 00:00:00.001 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:55:07.698 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:55:09.835 00:00:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:55:07.696 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 04:56:09.835 00:00:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:55:09.837 00:01:00.001 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 04:57:09.836 00:00:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:57:09.838 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 04:58:09.836 00:00:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 04:58:09.839 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 Summary: total flows: 122, total bytes: 19456, total packets: 286, avg bps: 43, avg pps: 0, avg bpp: 68 Time window: 2025-11-20 03:59:09 - 2025-11-20 04:58:09 Total flows processed: 122, passed: 122, Blocks skipped: 0, Bytes read: 12752 Sys: 0.0044s User: 0.0011s Wall: 0.0021s flows/second: 56774.1 Runtime: 0.0022s