Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 07:59:09.891 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 07:59:09.897 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:00:09.891 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:00:11.524 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:00:11.521 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:00:09.894 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 08:01:09.891 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:02:09.896 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:02:09.891 00:01:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:03:09.896 00:00:00.040 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:04:09.896 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:04:09.893 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:05:09.893 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:05:11.917 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:05:11.914 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:05:09.897 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 08:06:09.894 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:07:09.899 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:08:09.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:07:09.895 00:01:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:09:09.895 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:09:09.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:10:09.895 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:10:09.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:10:11.681 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:10:11.684 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:11:09.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:11:09.894 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:12:09.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:13:09.898 00:00:00.041 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:12:09.894 00:01:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:14:09.895 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:14:09.899 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:15:09.898 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:15:09.899 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:15:11.790 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:15:11.792 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:16:09.900 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:16:09.896 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:17:09.900 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:18:09.902 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:17:09.897 00:01:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:19:09.897 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:19:09.901 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:20:09.902 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:20:09.897 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:20:11.755 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:20:11.753 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:21:09.902 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:21:09.898 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:22:09.898 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:22:09.903 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:23:09.898 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:23:09.902 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:24:09.902 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:24:09.897 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:25:09.898 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:25:09.902 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:25:12.297 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:25:12.299 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:26:09.899 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:26:09.902 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:27:09.899 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:28:09.900 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:27:09.905 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 08:29:09.899 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:29:09.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:30:09.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:30:09.900 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:30:12.233 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:30:12.231 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:31:09.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:31:09.900 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:32:09.900 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:32:09.906 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 08:33:09.901 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:34:09.900 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:34:09.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:35:09.906 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:35:12.284 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:35:09.902 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:35:12.288 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:36:09.901 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:36:09.907 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:37:09.902 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:38:09.903 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:37:09.907 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 08:39:09.906 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:39:09.902 00:01:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:40:09.906 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:40:12.022 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:40:12.019 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:41:09.902 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:41:09.907 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:42:09.902 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:42:09.907 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:43:09.907 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:43:09.903 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:44:09.907 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:44:09.903 00:01:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:45:12.457 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:45:09.907 00:00:00.042 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:45:12.454 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:46:09.907 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:46:09.906 00:00:00.003 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:47:09.907 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:47:09.908 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:48:09.908 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:48:09.910 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:49:09.910 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:49:09.910 00:01:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:50:09.911 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:50:13.130 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:50:13.127 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:51:09.910 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:51:09.909 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:52:09.910 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:52:09.910 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:53:09.910 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:53:09.911 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:54:09.911 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:54:09.909 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:55:09.911 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:55:09.910 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:55:12.646 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:55:12.649 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:56:09.911 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:56:09.909 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:57:09.911 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:57:09.910 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:58:09.911 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:58:09.911 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 Summary: total flows: 132, total bytes: 18676, total packets: 271, avg bps: 42, avg pps: 0, avg bpp: 68 Time window: 2025-11-20 07:59:09 - 2025-11-20 08:58:09 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0051s User: 0.0010s Wall: 0.0022s flows/second: 59912.1 Runtime: 0.0022s