Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 20:56:28.349 00:05:01.122 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 20:57:29.540 00:05:02.752 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 20:57:27.493 00:05:01.979 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 20:58:29.460 00:05:02.864 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 20:58:29.461 00:05:04.802 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 21:02:43.297 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:02:43.344 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:02:43.474 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:02:43.507 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:02:43.498 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:02:43.424 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 20:59:57.093 00:05:10.013 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2968 1 2025-09-13 21:00:27.465 00:05:02.008 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 20:59:29.550 00:05:57.925 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 21:00:28.329 00:05:01.164 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 21:00:29.510 00:05:04.734 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 21:02:28.350 00:05:01.123 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 21:03:27.495 00:05:01.978 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 21:03:29.553 00:05:02.753 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 21:07:43.202 00:00:00.032 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:07:43.511 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:07:43.504 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:07:43.292 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:07:43.301 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:07:43.212 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:04:29.473 00:05:02.854 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 21:04:29.473 00:05:04.792 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 21:05:17.107 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2384 1 2025-09-13 21:05:29.553 00:05:57.922 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 21:06:27.466 00:05:02.007 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 21:06:28.331 00:05:01.162 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 21:06:29.513 00:05:04.732 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 21:08:28.351 00:05:01.123 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 21:12:43.200 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:12:43.196 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:12:43.284 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:12:43.410 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:12:43.403 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:12:43.276 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:09:27.495 00:05:01.979 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 21:09:29.554 00:05:02.756 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 21:10:29.476 00:05:02.854 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 21:10:29.477 00:05:04.791 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 21:10:37.113 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2544 1 2025-09-13 21:11:29.554 00:05:57.922 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 21:12:27.467 00:05:02.008 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 21:12:28.336 00:05:01.160 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 21:12:29.515 00:05:04.733 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 21:17:43.396 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:17:43.329 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:17:43.521 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:17:43.605 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:17:43.682 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:17:43.409 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:14:28.358 00:05:01.119 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 21:15:29.557 00:05:02.761 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 21:15:27.496 00:05:01.980 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 21:15:57.119 00:05:10.002 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 3012 1 2025-09-13 21:16:29.476 00:05:02.863 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 21:16:29.476 00:05:04.793 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 21:17:29.557 00:05:57.923 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 21:18:27.468 00:05:02.010 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 21:18:28.339 00:05:01.159 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 21:22:43.581 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:22:43.540 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:18:29.516 00:05:04.733 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 21:22:43.623 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:22:43.791 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:22:43.667 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:22:43.619 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:20:28.359 00:05:01.120 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 21:21:17.121 00:05:10.002 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2624 1 2025-09-13 21:21:27.500 00:05:01.980 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 21:21:29.557 00:05:02.764 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 21:22:29.478 00:05:02.864 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 21:22:29.478 00:05:04.793 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 21:27:43.736 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:27:43.836 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:27:43.817 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:27:43.945 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:27:43.937 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:27:43.915 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:23:29.558 00:05:57.923 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 21:24:28.340 00:05:01.159 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 21:24:27.469 00:05:02.010 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 21:24:29.519 00:05:04.732 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 21:26:28.360 00:05:01.120 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 21:26:37.124 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 43 3220 1 2025-09-13 21:27:29.560 00:05:02.762 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 21:27:27.502 00:05:01.979 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 21:28:29.479 00:05:02.864 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 21:28:29.480 00:05:04.793 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 21:32:43.633 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:32:43.636 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:32:43.716 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:32:43.778 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:32:43.846 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:32:43.931 00:00:00.013 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:29:29.560 00:05:57.923 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 21:30:27.470 00:05:02.018 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 21:30:28.341 00:05:01.168 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 21:30:29.520 00:05:04.733 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 21:31:57.129 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 32 2176 1 2025-09-13 21:32:28.361 00:05:01.122 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 21:33:27.502 00:05:01.982 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 21:33:29.562 00:05:02.762 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 21:37:43.868 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:37:44.160 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:37:44.079 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:37:44.279 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:37:44.144 00:00:00.028 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:37:44.064 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:34:29.481 00:05:02.863 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 21:34:29.481 00:05:04.793 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 21:35:29.569 00:05:57.914 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 21:36:28.341 00:05:01.166 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 21:36:27.473 00:05:02.014 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 21:36:29.523 00:05:04.733 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 21:37:17.134 00:05:10.002 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2608 1 2025-09-13 21:38:28.363 00:05:01.126 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 21:42:43.912 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:42:43.849 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:42:43.840 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:42:43.958 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:42:43.929 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:42:44.122 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:39:27.503 00:05:01.985 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 21:39:29.567 00:05:02.759 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 21:40:29.487 00:05:02.865 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 21:40:29.488 00:05:04.790 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 21:42:27.474 00:05:02.016 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 21:41:29.568 00:05:57.918 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 21:42:28.342 00:05:01.168 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 21:42:29.528 00:05:04.730 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 21:42:37.136 00:05:10.015 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2804 1 2025-09-13 21:47:43.906 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:47:44.261 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:47:43.988 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:47:44.307 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:47:44.479 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:47:44.514 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:44:28.363 00:05:01.128 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 21:45:27.504 00:05:01.987 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 21:45:29.571 00:05:02.755 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 21:46:29.490 00:05:02.856 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 21:46:29.490 00:05:04.790 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 21:47:57.150 00:05:10.011 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2400 1 2025-09-13 21:47:29.569 00:05:57.916 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 21:48:28.344 00:05:01.168 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 21:48:27.476 00:05:02.015 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 21:48:29.531 00:05:04.730 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-13 21:52:43.850 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:52:43.947 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:52:44.026 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:52:44.042 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:52:44.061 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:52:44.342 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:50:28.365 00:05:01.128 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-13 21:51:29.571 00:05:02.758 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-13 21:51:27.506 00:05:01.986 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-13 21:52:29.491 00:05:02.859 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-13 21:52:29.491 00:05:04.792 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-13 21:53:17.162 00:05:10.050 OSPF 27.0.10.1:0 -> 224.0.0.5:0 46 3260 1 2025-09-13 21:57:44.415 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:57:44.467 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:57:44.217 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:57:44.123 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-13 21:57:44.137 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 21:57:44.205 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-13 21:53:29.572 00:05:57.916 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-13 21:54:28.344 00:05:01.168 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-13 21:54:27.478 00:05:02.014 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-13 21:54:29.532 00:05:04.733 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 Summary: total flows: 173, total bytes: 114564, total packets: 1716, avg bps: 242, avg pps: 0, avg bpp: 66 Time window: 2025-09-13 20:56:28 - 2025-09-13 21:59:34 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0086s User: 0.0010s Wall: 0.0049s flows/second: 35669.0 Runtime: 0.0049s