Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 11:56:28.163 00:05:01.097 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 11:56:36.332 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 43 3200 1 2025-09-13 11:57:27.338 00:05:01.920 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 11:57:29.338 00:05:02.664 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 12:02:32.558 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:02:32.836 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:02:32.689 00:00:00.016 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:02:32.558 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:02:32.626 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:02:32.478 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 11:58:29.261 00:05:02.760 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 11:58:29.260 00:05:04.753 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 11:59:29.337 00:05:57.984 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:00:28.150 00:05:01.130 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 12:00:27.298 00:05:01.961 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:00:29.297 00:05:04.696 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 12:01:56.338 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-13 12:02:28.171 00:05:01.090 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 12:07:32.357 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:07:32.406 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:03:27.340 00:05:01.920 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 12:07:32.229 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:07:32.567 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:07:32.444 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:03:29.338 00:05:02.663 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 12:07:32.485 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:04:29.259 00:05:02.762 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 12:04:29.259 00:05:04.756 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 12:05:29.340 00:05:57.983 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:06:28.151 00:05:01.130 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 12:06:27.304 00:05:01.957 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:06:29.300 00:05:04.694 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 12:07:16.342 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2464 1 2025-09-13 12:12:32.487 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:12:32.439 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:08:28.171 00:05:01.091 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 12:12:32.612 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:12:32.698 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:12:32.564 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:12:32.519 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:09:27.343 00:05:01.920 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 12:09:29.340 00:05:02.663 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 12:10:29.261 00:05:02.764 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 12:10:29.261 00:05:04.758 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 12:11:29.341 00:05:57.984 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:12:28.153 00:05:01.129 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 12:12:27.305 00:05:01.958 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:12:29.301 00:05:04.697 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 12:12:36.350 00:05:10.017 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 3028 1 2025-09-13 12:17:33.230 00:00:00.027 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:17:33.349 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:17:32.940 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:17:33.226 00:00:00.026 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:17:33.138 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:17:33.145 00:00:00.027 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:14:28.174 00:05:01.095 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 12:15:29.343 00:05:02.664 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 12:15:27.345 00:05:01.922 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 12:16:29.262 00:05:02.764 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 12:16:29.262 00:05:04.759 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 12:17:56.367 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2352 1 2025-09-13 12:17:29.343 00:05:57.985 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:22:32.794 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:18:28.154 00:05:01.134 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 12:22:33.040 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:22:32.834 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:22:32.497 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:22:32.829 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:22:32.416 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:18:27.304 00:05:01.963 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:18:29.302 00:05:04.699 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 12:20:28.175 00:05:01.094 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 12:21:27.346 00:05:01.922 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 12:21:29.347 00:05:02.660 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 12:22:29.267 00:05:02.761 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 12:22:29.268 00:05:04.755 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 12:23:16.374 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 43 3052 1 2025-09-13 12:27:32.844 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:27:32.795 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:27:32.830 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:27:33.054 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:27:32.954 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:27:32.875 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:23:29.348 00:05:57.985 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:24:28.155 00:05:01.134 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 12:24:27.304 00:05:01.964 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:24:29.308 00:05:04.695 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 12:26:28.176 00:05:01.095 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 12:27:27.348 00:05:01.923 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 12:27:29.349 00:05:02.660 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 12:32:33.469 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:32:33.291 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:28:29.269 00:05:02.760 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 12:32:33.680 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:32:33.572 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:32:33.371 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:32:32.832 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:28:29.270 00:05:04.755 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 12:28:36.377 00:05:10.291 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2588 1 2025-09-13 12:29:29.349 00:05:57.981 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:30:28.157 00:05:01.134 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 12:30:27.309 00:05:01.963 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:30:29.311 00:05:04.695 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 12:32:28.179 00:05:01.092 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 12:37:32.956 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:37:33.008 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:37:33.136 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:33:29.351 00:05:02.676 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 12:37:32.945 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:33:27.351 00:05:01.921 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 12:37:32.797 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:37:32.865 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:33:56.383 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2544 1 2025-09-13 12:34:29.272 00:05:02.773 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 12:34:29.274 00:05:04.753 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 12:35:29.351 00:05:57.983 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:36:27.307 00:05:01.966 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:36:28.159 00:05:01.134 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 12:36:29.310 00:05:04.696 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 12:42:33.196 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:42:33.323 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:42:33.198 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:42:33.234 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:42:33.113 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:42:33.155 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:38:28.180 00:05:01.094 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 12:39:16.388 00:05:10.038 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2804 1 2025-09-13 12:39:27.351 00:05:01.922 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 12:39:29.352 00:05:02.676 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 12:40:29.273 00:05:02.775 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 12:40:29.273 00:05:04.754 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 12:41:29.353 00:05:57.980 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:42:28.159 00:05:01.136 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 12:42:27.310 00:05:01.965 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:42:29.313 00:05:04.694 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 12:47:33.310 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.382 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.431 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.088 00:00:00.054 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.171 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:47:33.009 00:00:00.052 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:44:28.183 00:05:01.093 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 12:44:36.393 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2400 1 2025-09-13 12:45:29.356 00:05:02.672 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 12:45:27.354 00:05:01.923 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 12:46:29.274 00:05:02.773 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 12:46:29.274 00:05:04.755 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 12:47:29.356 00:05:57.979 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:52:33.437 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:48:28.186 00:05:01.110 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 12:52:33.562 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:52:33.437 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:52:33.366 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:52:33.351 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:52:33.285 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:48:27.309 00:05:01.966 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:48:29.316 00:05:04.694 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 12:49:56.401 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 46 3240 1 2025-09-13 12:50:28.208 00:05:01.068 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 12:51:29.355 00:05:02.675 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 12:51:27.354 00:05:01.923 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 12:52:29.277 00:05:02.776 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 12:52:29.276 00:05:04.761 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 12:57:33.402 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:57:33.402 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 12:57:33.640 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:57:33.613 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:57:33.667 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:57:33.482 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 12:53:29.357 00:05:57.980 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 12:54:28.188 00:05:01.112 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 12:54:27.315 00:05:01.964 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 12:54:29.316 00:05:04.700 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 Summary: total flows: 173, total bytes: 114556, total packets: 1716, avg bps: 242, avg pps: 0, avg bpp: 66 Time window: 2025-09-13 11:56:28 - 2025-09-13 12:59:34 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0041s User: 0.0008s Wall: 0.0028s flows/second: 62747.7 Runtime: 0.0028s