Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 09:56:28.124 00:05:01.088 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 09:57:29.291 00:05:02.660 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 09:57:27.288 00:05:01.925 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 10:02:29.941 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:02:29.874 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 09:58:29.212 00:05:02.759 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 10:02:30.033 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:02:30.152 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:02:30.148 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:02:29.954 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 09:58:29.211 00:05:04.755 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 09:59:16.184 00:05:10.043 OSPF 27.0.10.1:0 -> 224.0.0.5:0 45 3176 1 2025-09-13 09:59:29.292 00:05:57.979 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 10:00:27.271 00:05:01.941 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 10:00:28.106 00:05:01.127 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 10:00:29.252 00:05:04.695 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 10:02:28.126 00:05:01.087 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 10:07:29.986 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:07:29.851 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:03:27.291 00:05:01.921 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 10:07:30.197 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:07:30.259 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:03:29.299 00:05:02.655 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 10:07:29.932 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:07:30.034 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:04:29.213 00:05:02.761 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 10:04:29.212 00:05:04.755 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 10:04:36.188 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2588 1 2025-09-13 10:05:29.292 00:05:57.987 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 10:06:28.107 00:05:01.130 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 10:06:27.272 00:05:01.944 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 10:06:29.253 00:05:04.696 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 10:12:30.412 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:12:30.447 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:12:30.454 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:12:30.409 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:12:30.237 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:12:30.329 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:08:28.128 00:05:01.091 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 10:09:27.293 00:05:01.926 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 10:09:29.294 00:05:02.660 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 10:09:56.193 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2608 1 2025-09-13 10:10:29.213 00:05:02.761 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 10:10:29.213 00:05:04.756 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 10:11:29.296 00:05:57.980 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 10:12:28.109 00:05:01.134 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 10:12:27.273 00:05:01.948 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 10:12:29.258 00:05:04.692 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 10:17:30.187 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:17:30.308 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:17:30.415 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:17:30.183 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:17:30.098 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:17:30.104 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:14:28.128 00:05:01.093 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 10:15:16.201 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 33 2256 1 2025-09-13 10:15:29.300 00:05:02.666 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 10:15:27.296 00:05:01.926 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 10:16:29.220 00:05:02.765 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 10:16:29.220 00:05:04.749 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 10:17:29.310 00:05:57.970 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 10:22:30.290 00:00:00.032 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:22:30.339 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:18:27.273 00:05:01.948 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 10:22:30.484 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:18:28.109 00:05:01.133 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 10:22:30.500 00:00:00.032 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:22:30.497 00:00:00.027 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:22:30.420 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:18:29.261 00:05:04.689 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 10:20:28.131 00:05:01.091 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 10:20:36.206 00:05:10.019 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2948 1 2025-09-13 10:21:27.299 00:05:01.924 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 10:21:29.302 00:05:02.665 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 10:22:29.221 00:05:02.766 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 10:22:29.221 00:05:04.749 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 10:27:30.536 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:27:30.435 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:27:30.509 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:27:30.300 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:27:30.224 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:27:30.219 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:23:29.302 00:05:57.980 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 10:24:28.110 00:05:01.140 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 10:24:27.275 00:05:01.954 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 10:24:29.262 00:05:04.689 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 10:25:56.225 00:05:10.588 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 2908 1 2025-09-13 10:26:28.132 00:05:01.099 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 10:27:27.300 00:05:01.930 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 10:27:29.303 00:05:02.666 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 10:32:31.083 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:32:31.093 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:28:29.229 00:05:02.763 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 10:32:31.284 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:32:31.175 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:32:31.068 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:32:31.295 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:28:29.229 00:05:04.743 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 10:29:29.310 00:05:57.973 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 10:30:28.112 00:05:01.139 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 10:30:27.278 00:05:01.953 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 10:30:29.270 00:05:04.687 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 10:31:16.231 00:05:10.012 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2892 1 2025-09-13 10:32:28.133 00:05:01.098 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 10:37:30.649 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:37:30.715 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:37:30.613 00:00:00.013 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:33:29.319 00:05:02.657 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 10:37:30.695 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:33:27.302 00:05:01.929 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 10:37:30.505 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:37:30.615 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:34:29.230 00:05:02.766 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 10:34:29.230 00:05:04.746 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 10:35:29.311 00:05:57.973 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 10:36:28.114 00:05:01.139 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 10:36:27.278 00:05:01.955 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 10:36:29.271 00:05:04.686 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 10:36:36.234 00:05:10.012 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2464 1 2025-09-13 10:42:30.779 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:42:30.960 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:42:30.780 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:42:30.656 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:38:28.135 00:05:01.100 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 10:42:30.749 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:42:30.575 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:39:29.311 00:05:02.665 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 10:39:27.304 00:05:01.933 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 10:40:29.233 00:05:02.763 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 10:40:29.234 00:05:04.745 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 10:41:56.244 00:05:10.001 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-13 10:41:29.314 00:05:58.014 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 10:42:28.116 00:05:01.140 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 10:42:27.282 00:05:01.954 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 10:42:29.275 00:05:04.685 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 10:47:30.806 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:47:30.687 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:47:30.696 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:47:31.017 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:47:31.011 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:47:30.767 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:44:28.138 00:05:01.103 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 10:45:29.315 00:05:02.662 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 10:45:27.306 00:05:01.935 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 10:46:29.235 00:05:02.763 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 10:46:29.236 00:05:04.745 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 10:47:16.247 00:05:10.002 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 3028 1 2025-09-13 10:47:29.317 00:05:57.984 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 10:52:30.850 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:52:30.848 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:48:27.284 00:05:01.957 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 10:52:30.920 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:48:28.119 00:05:01.143 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 10:52:31.064 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:52:31.138 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:52:30.930 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:48:29.281 00:05:04.680 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 10:50:28.138 00:05:01.103 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 10:51:27.321 00:05:01.922 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 10:51:29.321 00:05:02.664 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 10:52:29.241 00:05:02.765 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 10:52:29.242 00:05:04.741 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 10:52:36.248 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2400 1 2025-09-13 10:57:30.937 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 10:57:30.874 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 10:57:31.147 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:57:31.138 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:57:30.954 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:57:31.158 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 10:53:29.322 00:05:57.983 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 10:54:28.119 00:05:01.143 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 10:54:27.285 00:05:01.958 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 10:54:29.281 00:05:04.682 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 Summary: total flows: 173, total bytes: 114152, total packets: 1711, avg bps: 241, avg pps: 0, avg bpp: 66 Time window: 2025-09-13 09:56:28 - 2025-09-13 10:59:33 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0036s User: 0.0014s Wall: 0.0023s flows/second: 75092.1 Runtime: 0.0023s