Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 18:56:28.307 00:05:01.108 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 18:57:29.494 00:05:02.722 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 18:57:27.456 00:05:01.960 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 18:57:26.872 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 32 2176 1 2025-09-13 18:58:29.415 00:05:02.822 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 18:58:29.415 00:05:04.808 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 19:02:40.725 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:02:40.651 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:02:40.855 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:02:40.935 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:02:40.973 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:02:40.731 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 18:59:29.495 00:05:57.944 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 19:00:28.288 00:05:01.153 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 19:00:27.432 00:05:01.988 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 19:00:29.456 00:05:04.746 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 19:02:28.309 00:05:01.112 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 19:02:46.878 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 44 3168 1 2025-09-13 19:03:27.457 00:05:01.963 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 19:03:29.497 00:05:02.722 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 19:07:40.850 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:07:40.839 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:07:41.060 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:07:41.129 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:07:40.920 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:07:40.930 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:04:29.418 00:05:02.822 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 19:04:29.419 00:05:04.806 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 19:05:29.501 00:05:57.939 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 19:06:28.290 00:05:01.152 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 19:06:27.432 00:05:01.988 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 19:06:29.460 00:05:04.743 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 19:08:06.882 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2668 1 2025-09-13 19:08:28.310 00:05:01.112 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 19:12:40.927 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:12:40.716 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:12:40.801 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:12:41.137 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:12:41.097 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:12:40.796 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:09:27.460 00:05:01.962 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 19:09:29.500 00:05:02.721 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 19:10:29.422 00:05:02.821 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 19:10:29.421 00:05:04.803 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 19:11:29.503 00:05:57.939 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 19:12:27.434 00:05:01.988 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 19:12:28.297 00:05:01.145 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 19:12:29.461 00:05:04.744 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 19:13:26.885 00:05:10.015 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2608 1 2025-09-13 19:17:41.089 00:00:00.050 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:17:41.070 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:17:41.365 00:00:00.027 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:17:40.941 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:17:40.861 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:17:40.862 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:14:28.317 00:05:01.105 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 19:15:27.460 00:05:01.963 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 19:15:29.501 00:05:02.722 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 19:16:29.421 00:05:02.823 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 19:16:29.422 00:05:04.803 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 19:17:29.502 00:05:57.939 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 19:18:28.299 00:05:01.144 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 19:18:27.436 00:05:01.987 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 19:18:29.464 00:05:04.743 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 19:22:41.194 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:22:41.188 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:22:41.081 00:00:00.037 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:22:41.089 00:00:00.044 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:22:40.985 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:22:41.003 00:00:00.037 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:18:46.901 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2560 1 2025-09-13 19:20:28.323 00:05:01.100 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 19:21:29.503 00:05:02.722 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 19:21:27.461 00:05:01.963 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 19:22:29.423 00:05:02.831 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 19:22:29.423 00:05:04.804 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 19:27:41.694 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:27:41.820 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:27:41.702 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:27:41.574 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:27:41.612 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:27:41.495 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:24:06.909 00:05:10.018 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2644 1 2025-09-13 19:23:29.503 00:05:57.942 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 19:24:28.301 00:05:01.143 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 19:24:27.439 00:05:01.986 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 19:24:29.464 00:05:04.745 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 19:26:28.321 00:05:01.104 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 19:27:29.504 00:05:02.725 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 19:27:27.465 00:05:01.961 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 19:28:29.425 00:05:02.835 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 19:28:29.425 00:05:04.805 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 19:32:41.344 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:32:41.623 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:32:41.369 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:32:41.337 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:32:41.413 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:32:41.257 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:29:26.927 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 3004 1 2025-09-13 19:29:29.505 00:05:57.939 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 19:30:27.440 00:05:01.986 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 19:30:28.301 00:05:01.144 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 19:30:29.465 00:05:04.745 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 19:32:28.322 00:05:01.103 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 19:33:29.504 00:05:02.744 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 19:33:27.465 00:05:01.961 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 19:37:41.951 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:37:41.613 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:37:41.472 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:37:41.832 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:37:41.260 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:37:41.869 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:34:29.425 00:05:02.836 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 19:34:29.426 00:05:04.808 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 19:34:46.933 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2748 1 2025-09-13 19:35:29.506 00:05:57.939 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 19:36:27.444 00:05:01.983 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 19:36:28.306 00:05:01.141 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 19:36:29.465 00:05:04.748 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 19:38:28.326 00:05:01.101 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 19:42:41.583 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:42:41.365 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:42:41.673 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:42:41.794 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:42:41.574 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:42:41.446 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:39:27.465 00:05:01.962 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 19:39:29.505 00:05:02.741 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 19:40:06.943 00:05:10.411 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2608 1 2025-09-13 19:40:29.427 00:05:02.840 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 19:40:29.427 00:05:04.808 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 19:41:29.507 00:05:57.939 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 19:42:27.446 00:05:01.982 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 19:42:28.309 00:05:01.138 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 19:42:29.467 00:05:04.748 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 19:47:41.666 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:47:41.604 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:47:41.642 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:47:41.793 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:47:41.432 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:47:41.585 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:44:28.329 00:05:01.098 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 19:45:27.465 00:05:01.962 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 19:45:29.508 00:05:02.739 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 19:45:26.946 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 33 2256 1 2025-09-13 19:46:29.428 00:05:02.840 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 19:46:29.427 00:05:04.809 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 19:47:29.507 00:05:57.941 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 19:48:27.445 00:05:01.983 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 19:48:28.312 00:05:01.135 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 19:52:41.593 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:52:41.590 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:48:29.468 00:05:04.748 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 19:52:41.866 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:52:41.803 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:52:41.795 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:52:41.670 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:50:28.332 00:05:01.097 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 19:50:46.954 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2948 1 2025-09-13 19:51:27.468 00:05:01.962 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 19:51:29.513 00:05:02.737 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 19:52:29.427 00:05:02.840 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 19:52:29.428 00:05:04.809 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 19:57:42.007 00:00:00.042 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 19:57:41.897 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 19:57:42.188 00:00:00.017 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:57:42.216 00:00:00.043 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:57:42.107 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:57:41.976 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 19:53:29.508 00:05:57.941 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 19:54:28.312 00:05:01.139 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 19:54:27.447 00:05:01.984 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 19:54:29.469 00:05:04.749 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 Summary: total flows: 173, total bytes: 113952, total packets: 1707, avg bps: 240, avg pps: 0, avg bpp: 66 Time window: 2025-09-13 18:56:28 - 2025-09-13 19:59:34 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0022s User: 0.0033s Wall: 0.0022s flows/second: 80240.5 Runtime: 0.0022s