Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 17:56:28.296 00:05:01.103 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 17:57:29.478 00:05:02.719 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 17:57:27.442 00:05:01.957 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 17:58:29.398 00:05:02.819 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 17:58:29.398 00:05:04.812 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 18:02:39.678 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:02:39.669 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:02:39.589 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:02:39.591 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:02:39.469 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:02:39.509 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 17:58:46.802 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 33 2320 1 2025-09-13 17:59:29.479 00:05:57.947 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 18:00:27.421 00:05:01.980 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 18:00:28.278 00:05:01.144 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 18:00:29.440 00:05:04.752 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 18:02:28.297 00:05:01.102 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 18:03:27.446 00:05:01.954 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 18:03:29.479 00:05:02.718 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 18:07:39.604 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:07:39.607 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:07:39.514 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:07:39.815 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:07:40.010 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:07:39.688 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:04:06.807 00:05:10.021 OSPF 27.0.10.1:0 -> 224.0.0.5:0 45 3160 1 2025-09-13 18:04:29.399 00:05:02.819 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 18:04:29.400 00:05:04.812 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 18:05:29.480 00:05:57.948 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 18:06:28.278 00:05:01.142 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 18:06:27.423 00:05:01.978 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 18:06:29.441 00:05:04.751 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 18:08:28.298 00:05:01.102 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 18:12:39.841 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:12:39.864 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:12:39.923 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:12:39.735 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:12:39.655 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:12:39.656 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:09:27.446 00:05:01.954 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 18:09:29.481 00:05:02.719 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 18:09:26.828 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2684 1 2025-09-13 18:10:29.400 00:05:02.819 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 18:10:29.401 00:05:04.812 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 18:11:29.480 00:05:57.948 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 18:12:28.279 00:05:01.142 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 18:12:27.423 00:05:01.978 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 18:12:29.442 00:05:04.752 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 18:17:40.037 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:17:39.996 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:17:40.157 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:17:40.152 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:17:39.786 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:17:40.072 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:14:28.300 00:05:01.102 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 18:14:46.832 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2464 1 2025-09-13 18:15:29.483 00:05:02.721 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 18:15:27.450 00:05:01.954 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 18:16:29.402 00:05:02.823 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 18:16:29.401 00:05:04.812 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 18:17:29.482 00:05:57.948 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 18:18:28.279 00:05:01.143 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 18:18:27.424 00:05:01.979 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 18:18:29.443 00:05:04.751 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 18:22:39.991 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:22:40.119 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:22:40.112 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:22:39.816 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:22:39.909 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:22:39.736 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:20:06.839 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2400 1 2025-09-13 18:20:28.300 00:05:01.104 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 18:21:27.450 00:05:01.955 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 18:21:29.482 00:05:02.723 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 18:22:29.403 00:05:02.822 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 18:22:29.402 00:05:04.812 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 18:27:39.937 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:27:40.052 00:00:00.029 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:27:40.149 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:27:40.144 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:27:40.134 00:00:00.029 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:27:40.024 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:23:29.484 00:05:57.947 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 18:24:28.281 00:05:01.144 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 18:24:27.426 00:05:01.980 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 18:24:29.444 00:05:04.752 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 18:25:26.844 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 3012 1 2025-09-13 18:26:28.303 00:05:01.105 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 18:27:27.450 00:05:01.955 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 18:27:29.486 00:05:02.720 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 18:28:29.406 00:05:02.821 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 18:32:40.153 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:32:40.274 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:32:40.258 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:32:40.131 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:28:29.406 00:05:04.810 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 18:32:40.064 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:32:40.051 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:29:29.486 00:05:57.945 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 18:30:27.429 00:05:01.979 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 18:30:28.282 00:05:01.146 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 18:30:29.446 00:05:04.751 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 18:30:46.849 00:05:10.560 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2688 1 2025-09-13 18:32:28.303 00:05:01.106 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 18:33:29.488 00:05:02.719 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 18:33:27.451 00:05:01.957 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 18:37:40.557 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:37:40.593 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:37:40.533 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:37:40.769 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:37:40.763 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:37:40.675 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:34:29.408 00:05:02.819 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 18:34:29.408 00:05:04.810 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 18:36:06.854 00:05:10.022 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 3112 1 2025-09-13 18:35:29.488 00:05:57.944 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 18:36:27.428 00:05:01.983 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 18:36:28.283 00:05:01.148 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 18:36:29.448 00:05:04.750 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 18:38:28.304 00:05:01.107 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 18:42:40.303 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:42:40.432 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:42:40.383 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:42:40.512 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:42:40.337 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:42:40.512 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:39:27.453 00:05:01.959 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 18:39:29.491 00:05:02.719 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 18:40:29.411 00:05:02.825 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 18:40:29.412 00:05:04.807 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 18:41:26.855 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-13 18:41:29.492 00:05:57.941 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 18:42:28.285 00:05:01.147 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 18:42:27.430 00:05:01.982 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 18:42:29.452 00:05:04.748 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 18:47:40.569 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:47:40.520 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:47:40.737 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:47:40.619 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:47:40.309 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:47:40.538 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:44:28.305 00:05:01.107 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 18:45:29.492 00:05:02.721 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 18:45:27.453 00:05:01.960 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 18:46:29.411 00:05:02.822 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 18:46:29.412 00:05:04.808 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 18:46:46.861 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2464 1 2025-09-13 18:47:29.497 00:05:57.938 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 18:48:28.286 00:05:01.147 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 18:48:27.430 00:05:01.983 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 18:48:29.453 00:05:04.748 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 18:52:40.597 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:52:40.410 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:52:40.611 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:52:40.807 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:52:40.621 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:52:40.490 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:50:28.306 00:05:01.107 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 18:51:29.493 00:05:02.723 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 18:51:27.455 00:05:01.959 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 18:52:06.867 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 3028 1 2025-09-13 18:52:29.413 00:05:02.821 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 18:52:29.413 00:05:04.809 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 18:57:40.663 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:57:40.787 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:57:40.785 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:57:40.665 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:57:40.576 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 18:57:40.585 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 18:53:29.494 00:05:57.944 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 18:54:27.431 00:05:01.985 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 18:54:28.287 00:05:01.148 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 18:54:29.453 00:05:04.748 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 Summary: total flows: 173, total bytes: 114216, total packets: 1711, avg bps: 241, avg pps: 0, avg bpp: 66 Time window: 2025-09-13 17:56:28 - 2025-09-13 18:59:34 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0034s User: 0.0011s Wall: 0.0025s flows/second: 70067.1 Runtime: 0.0025s