Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 12:55:25.459 00:05:00.713 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-05 12:55:23.619 00:05:01.763 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-05 12:55:25.418 00:05:04.055 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-05 12:56:24.363 00:05:01.017 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-05 12:56:40.616 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-05 12:57:23.597 00:05:01.785 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-05 12:58:25.380 00:05:00.812 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-05 13:03:35.195 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:03:35.190 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:03:35.048 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:03:35.406 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:03:35.448 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:03:35.271 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:00:23.577 00:05:01.885 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-05 13:00:24.344 00:05:01.057 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-05 12:59:29.493 00:05:55.888 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-05 13:01:23.622 00:05:01.760 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-05 13:01:25.461 00:05:00.713 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-05 13:01:25.421 00:05:04.055 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-05 13:02:00.621 00:05:10.014 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 2996 1 2025-09-05 13:02:24.365 00:05:01.018 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-05 13:03:23.600 00:05:01.783 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-05 13:04:25.382 00:05:00.811 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-05 13:08:35.288 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:08:35.340 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:08:35.366 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:08:35.499 00:00:00.029 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:08:35.585 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:08:35.420 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:06:23.578 00:05:01.885 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-05 13:06:24.344 00:05:01.059 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-05 13:05:29.496 00:05:55.887 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-05 13:07:25.462 00:05:00.711 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-05 13:07:23.623 00:05:01.760 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-05 13:07:20.634 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2772 1 2025-09-05 13:07:25.422 00:05:04.053 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-05 13:08:24.365 00:05:01.019 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-05 13:09:23.599 00:05:01.784 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-05 13:13:35.296 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:13:35.190 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:13:35.483 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:13:35.270 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:13:35.434 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:13:35.507 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:10:25.383 00:05:00.813 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-05 13:12:23.580 00:05:01.884 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-05 13:12:24.346 00:05:01.058 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-05 13:11:29.498 00:05:55.888 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-05 13:12:40.642 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2664 1 2025-09-05 13:13:25.464 00:05:00.710 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-05 13:13:23.624 00:05:01.760 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-05 13:13:25.424 00:05:04.057 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-05 13:14:24.370 00:05:01.015 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-05 13:18:35.551 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:18:35.395 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:18:35.634 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:18:35.760 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:18:35.756 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:18:35.474 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:15:23.601 00:05:01.784 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-05 13:16:25.384 00:05:00.811 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-05 13:18:00.647 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2744 1 2025-09-05 13:17:29.497 00:05:55.891 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-05 13:18:23.582 00:05:01.885 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-05 13:18:24.352 00:05:01.054 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-05 13:19:25.465 00:05:00.733 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-05 13:19:23.624 00:05:01.764 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-05 13:19:25.424 00:05:04.056 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-05 13:23:35.916 00:00:00.030 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:23:35.831 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:23:35.450 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:23:35.721 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:23:35.682 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:23:35.370 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:20:24.373 00:05:01.014 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-05 13:21:23.604 00:05:01.783 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-05 13:22:25.385 00:05:00.834 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-05 13:23:20.654 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2608 1 2025-09-05 13:24:23.585 00:05:01.884 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-05 13:24:24.356 00:05:01.052 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-05 13:23:29.499 00:05:55.889 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-05 13:28:35.738 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:28:35.868 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:28:35.861 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:28:35.794 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:28:35.658 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:28:35.714 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:25:23.626 00:05:01.762 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-05 13:25:25.468 00:05:00.731 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-05 13:25:25.427 00:05:04.054 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-05 13:26:24.375 00:05:01.013 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-05 13:27:23.605 00:05:01.784 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-05 13:28:25.387 00:05:00.831 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-05 13:28:40.663 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2852 1 2025-09-05 13:33:36.168 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:33:35.874 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:33:35.862 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:33:35.752 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:33:35.947 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:33:35.780 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:30:23.587 00:05:01.882 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-05 13:30:24.356 00:05:01.052 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-05 13:29:29.502 00:05:55.887 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-05 13:31:23.625 00:05:01.763 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-05 13:31:25.468 00:05:00.732 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-05 13:31:25.429 00:05:04.054 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-05 13:32:24.376 00:05:01.012 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-05 13:33:23.608 00:05:01.781 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-05 13:34:00.666 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2464 1 2025-09-05 13:34:25.389 00:05:00.832 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-05 13:38:35.786 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:38:35.788 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:38:35.779 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:38:35.997 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:38:35.992 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:38:35.869 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:35:29.502 00:05:55.886 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-05 13:36:23.593 00:05:01.877 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-05 13:36:24.358 00:05:01.051 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-05 13:37:25.468 00:05:00.733 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-05 13:37:23.628 00:05:01.762 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-05 13:37:25.428 00:05:04.055 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-05 13:38:24.378 00:05:01.012 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-05 13:39:23.613 00:05:01.777 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-05 13:43:36.101 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:43:35.789 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:39:20.672 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2852 1 2025-09-05 13:43:36.084 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:43:36.313 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:43:36.099 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:43:35.870 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:40:25.389 00:05:00.843 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-05 13:42:23.595 00:05:01.883 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-05 13:42:24.359 00:05:01.053 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-05 13:41:29.504 00:05:55.888 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-05 13:43:23.628 00:05:01.763 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-05 13:43:25.470 00:05:00.733 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-05 13:43:25.429 00:05:04.055 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-05 13:44:24.379 00:05:01.014 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-05 13:48:35.997 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:48:35.902 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:48:36.320 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:48:36.206 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:48:36.311 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:48:35.981 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:44:40.682 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2808 1 2025-09-05 13:45:23.616 00:05:01.777 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-05 13:46:25.393 00:05:00.830 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-05 13:48:23.595 00:05:01.878 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-05 13:48:24.359 00:05:01.054 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-05 13:47:29.506 00:05:55.888 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-05 13:49:23.632 00:05:01.762 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-05 13:49:25.473 00:05:00.731 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-05 13:49:25.433 00:05:04.054 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-05 13:53:36.390 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:53:36.509 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:53:36.445 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:53:36.476 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:53:36.298 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:53:36.395 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 13:50:00.689 00:05:00.387 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2660 1 2025-09-05 13:50:24.380 00:05:01.014 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-05 13:51:23.617 00:05:01.777 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-05 13:52:25.394 00:05:00.832 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-05 13:54:23.598 00:05:01.877 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-05 13:54:24.362 00:05:01.053 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-05 13:53:29.506 00:05:55.888 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-05 13:58:36.457 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:58:36.442 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:58:36.487 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:58:36.404 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-05 13:58:36.232 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-05 13:58:36.323 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 114304, total packets: 1714, avg bps: 238, avg pps: 0, avg bpp: 66 Time window: 2025-09-05 12:55:23 - 2025-09-05 13:59:25 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0020s User: 0.0031s Wall: 0.0026s flows/second: 65353.0 Runtime: 0.0027s