Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 01:58:14.799 00:01:00.085 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 01:59:14.799 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 01:59:54.888 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 01:59:54.890 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:00:14.798 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:00:14.800 00:00:00.084 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:01:14.800 00:00:00.088 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:02:14.801 00:00:00.087 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:01:14.798 00:01:00.093 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:03:14.800 00:00:00.091 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:04:14.800 00:00:00.091 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:03:14.802 00:01:00.086 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 02:04:54.957 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:04:54.953 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:05:14.804 00:00:00.084 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:05:14.801 00:00:00.090 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:06:14.804 00:00:00.084 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:06:14.801 00:01:00.090 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:07:14.805 00:00:00.085 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:08:14.802 00:01:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:08:14.804 00:01:00.085 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 02:09:55.123 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:09:55.121 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:10:14.806 00:00:00.084 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:10:14.802 00:00:00.090 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:11:14.805 00:00:00.084 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:11:14.802 00:00:00.090 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:12:14.806 00:00:00.086 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:12:14.809 00:00:00.081 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:13:14.808 00:01:00.081 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 02:13:14.806 00:01:00.086 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:14:55.023 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:14:55.021 00:00:00.020 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:15:14.806 00:00:00.086 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:15:14.808 00:00:00.081 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:16:14.809 00:00:00.081 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:16:14.806 00:00:00.086 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:17:14.809 00:00:00.081 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:17:14.808 00:00:00.086 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:18:14.809 00:00:00.082 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:19:14.809 00:00:00.081 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:18:14.806 00:01:00.087 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:19:55.546 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:19:55.547 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:20:14.808 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:21:14.806 00:00:00.088 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:20:14.810 00:01:00.083 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 02:22:14.811 00:00:00.081 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:22:14.809 00:00:00.086 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:23:14.809 00:00:00.083 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:24:14.810 00:00:00.083 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:23:14.806 00:01:00.088 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:24:55.542 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:24:55.544 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:25:14.808 00:00:00.087 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:26:14.807 00:00:00.088 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:25:14.810 00:01:00.082 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 02:27:14.808 00:00:00.087 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:27:14.810 00:00:00.082 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:28:14.811 00:00:00.082 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:28:14.808 00:01:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:29:14.811 00:00:00.083 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:29:55.249 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:29:55.251 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:30:14.808 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:30:14.810 00:01:00.084 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 02:31:14.807 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:32:14.808 00:00:00.089 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:32:14.811 00:00:00.083 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:33:14.811 00:00:00.084 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:33:14.808 00:01:00.091 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:34:14.823 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:34:55.835 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:34:55.837 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:35:14.819 00:00:00.080 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:36:14.818 00:00:00.080 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:35:14.822 00:01:00.075 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 02:37:14.822 00:00:00.075 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:37:14.818 00:00:00.081 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:38:14.822 00:00:00.075 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:38:14.819 00:01:00.080 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:39:14.821 00:00:00.075 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:39:55.659 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:39:55.661 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:40:14.819 00:01:00.080 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:40:14.821 00:01:00.075 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 02:42:14.823 00:00:00.074 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:42:14.820 00:00:00.079 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:43:14.820 00:00:00.079 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:43:14.824 00:00:00.074 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:44:14.821 00:00:00.080 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:44:14.823 00:00:00.075 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:44:55.763 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:44:55.766 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:45:14.821 00:01:00.079 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:45:14.824 00:01:00.074 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 02:47:14.821 00:00:00.080 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:47:14.824 00:00:00.074 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:48:14.826 00:00:00.074 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:48:14.822 00:00:00.079 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:49:14.824 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:49:14.826 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:49:55.702 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:49:55.704 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:50:14.827 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:51:14.826 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:50:14.824 00:01:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:52:14.827 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:52:14.824 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:53:14.827 00:00:00.074 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:53:14.824 00:00:00.079 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:54:14.825 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:54:14.828 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:54:55.958 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 02:54:55.954 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 02:55:14.828 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:55:14.826 00:01:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 02:56:14.829 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 02:57:14.825 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 02:57:14.828 00:01:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 02:58:14.826 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 Summary: total flows: 121, total bytes: 20931, total packets: 314, avg bps: 46, avg pps: 0, avg bpp: 66 Time window: 2025-11-30 01:58:14 - 2025-11-30 02:58:14 Total flows processed: 121, passed: 121, Blocks skipped: 0, Bytes read: 12648 Sys: 0.0046s User: 0.0012s Wall: 0.0035s flows/second: 34559.8 Runtime: 0.0035s