Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 11:59:09.972 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 11:59:09.968 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:00:09.971 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:00:17.978 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:00:17.980 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:00:09.973 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 12:02:09.973 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:01:09.970 00:01:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 12:03:09.971 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:03:09.974 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:04:09.975 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:04:09.971 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:05:09.975 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:05:18.049 00:00:00.039 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:05:18.046 00:00:00.039 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:06:09.971 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:05:09.974 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 12:07:09.972 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:07:09.976 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:08:09.971 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:08:09.975 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:09:09.977 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:09:09.972 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:10:09.976 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:10:09.972 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:10:18.286 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:10:18.289 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:11:09.973 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:11:09.977 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:12:09.973 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:12:09.977 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:13:09.973 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:13:09.978 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:14:09.973 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:14:09.977 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:15:09.977 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:15:09.973 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:15:18.476 00:00:00.030 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:15:18.480 00:00:00.031 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:16:09.973 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:16:09.977 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:17:09.974 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:17:09.978 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:18:09.974 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:18:09.979 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:19:09.979 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:19:09.974 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:20:09.974 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:20:09.979 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:20:18.323 00:00:00.025 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:20:18.326 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:21:09.975 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:21:09.980 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 12:22:09.976 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:23:09.975 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:23:09.978 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:24:09.977 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:25:09.980 00:00:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:24:09.979 00:01:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 12:25:18.682 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:25:18.679 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:26:09.980 00:00:00.003 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:26:09.980 00:00:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:27:09.981 00:00:00.001 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:27:09.979 00:00:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:28:09.979 00:00:00.003 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:28:09.980 00:00:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:29:09.980 00:00:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:29:09.980 00:00:00.003 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:30:09.981 00:00:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:30:09.981 00:00:00.003 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:30:18.781 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:30:18.779 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:31:09.980 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:31:09.982 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:32:09.981 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:32:09.981 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:33:09.983 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:34:09.982 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:33:09.981 00:01:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 12:35:09.983 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:35:09.982 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:35:18.787 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:35:18.790 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:36:09.983 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:36:09.982 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:37:09.983 00:00:00.003 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:37:09.983 00:00:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:38:09.983 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:38:09.983 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:39:09.983 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:39:09.983 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:40:09.983 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:40:09.983 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:40:19.163 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:40:19.167 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:41:09.983 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:41:09.984 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:42:09.983 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:42:09.984 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:43:09.983 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:43:09.985 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:44:09.983 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:44:09.986 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:45:09.986 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:45:09.983 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:45:19.236 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:45:19.234 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:46:09.986 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:46:09.983 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:47:09.984 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:47:09.989 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 12:48:09.985 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:48:09.987 00:01:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 12:49:09.985 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:50:09.989 00:00:00.002 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:50:19.206 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:50:19.208 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:50:09.987 00:01:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 12:51:09.991 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:52:09.990 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:52:09.989 00:00:00.004 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:53:09.991 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:54:09.991 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:53:09.989 00:01:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 12:55:09.991 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:55:09.989 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:55:19.092 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 12:55:19.091 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 12:56:09.992 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:56:09.990 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:57:09.993 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 12:57:09.989 00:00:00.005 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:58:09.989 00:00:00.006 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 12:58:09.993 00:00:00.000 TCP 179.27.28.28:179 -> 179.27.28.27:53088 1 71 1 Summary: total flows: 135, total bytes: 19664, total packets: 290, avg bps: 44, avg pps: 0, avg bpp: 67 Time window: 2025-11-20 11:59:09 - 2025-11-20 12:58:09 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0049s User: 0.0012s Wall: 0.0017s flows/second: 78490.6 Runtime: 0.0017s