Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 07:59:14.906 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 07:59:14.907 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:00:02.124 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:00:02.125 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:00:14.906 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:00:14.907 00:01:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:01:14.905 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:02:14.908 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:02:14.906 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:03:14.909 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:03:14.907 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:04:14.905 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:04:14.908 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:05:02.124 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:05:02.128 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:05:14.905 00:01:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:05:14.908 00:01:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:07:14.909 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:07:14.913 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:08:14.910 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:08:14.909 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:09:14.912 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:09:14.910 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:10:02.459 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:10:02.462 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:10:14.913 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:10:14.910 00:01:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:11:14.913 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:12:14.913 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:12:14.912 00:00:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:13:14.911 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:13:14.913 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:14:14.913 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:14:14.911 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:15:02.500 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:15:02.504 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:15:14.915 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:15:14.911 00:01:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:16:14.916 00:00:00.067 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:17:14.915 00:00:00.067 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:17:14.913 00:00:00.072 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:18:14.915 00:00:00.067 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:18:14.912 00:00:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:19:14.913 00:00:00.072 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:19:14.915 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:20:02.662 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:20:02.664 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:20:14.912 00:00:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:20:14.916 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:21:14.913 00:00:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:21:14.916 00:00:00.067 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:22:14.916 00:00:00.067 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:22:14.914 00:00:00.072 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:23:14.913 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:23:14.915 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:24:14.913 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:24:14.916 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:25:02.815 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:25:02.818 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:25:14.917 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:25:14.914 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:26:14.913 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:26:14.917 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:27:14.913 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:28:14.915 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:27:14.917 00:01:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:29:14.913 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:29:14.916 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:30:02.715 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:30:02.714 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:30:14.914 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:30:14.917 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:31:14.918 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:31:14.915 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:32:14.915 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:33:14.916 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:32:14.919 00:01:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:34:14.915 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:34:14.918 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:35:02.810 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:35:02.808 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:35:14.916 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:35:14.919 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:36:14.916 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:36:14.918 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:37:14.920 00:01:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:37:14.917 00:01:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:39:14.919 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:39:14.918 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:40:02.884 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:40:02.887 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:40:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:40:14.917 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:41:14.917 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:41:14.919 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:42:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:42:14.917 00:01:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:43:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:44:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:44:14.918 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:45:02.942 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:45:02.939 00:00:00.024 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:45:14.917 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:45:14.921 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:46:14.917 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:46:14.921 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:47:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:48:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:47:14.917 00:01:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:49:14.918 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:49:14.920 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:50:02.923 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:50:02.921 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:50:14.918 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:50:14.921 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:51:14.922 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:51:14.919 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:52:14.919 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:52:14.921 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:53:14.918 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:53:14.921 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:54:14.918 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:54:14.922 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:55:03.235 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:55:03.238 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:55:14.921 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:55:14.919 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:56:14.920 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:56:14.922 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:57:14.921 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:57:14.924 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:58:14.922 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:58:14.925 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 Summary: total flows: 133, total bytes: 20808, total packets: 312, avg bps: 47, avg pps: 0, avg bpp: 66 Time window: 2025-11-30 07:59:14 - 2025-11-30 08:58:14 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0050s User: 0.0008s Wall: 0.0015s flows/second: 90280.4 Runtime: 0.0015s