Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 01:56:28.433 00:05:01.117 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-14 01:57:29.629 00:05:02.836 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-14 01:57:27.587 00:05:01.964 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-14 01:58:29.550 00:05:02.936 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-14 01:58:29.549 00:05:04.818 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-14 01:58:37.574 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2684 1 2025-09-14 02:02:49.189 00:00:00.014 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.493 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.385 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.260 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.283 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:02:49.180 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 01:59:29.630 00:05:57.937 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-14 02:00:27.537 00:05:02.014 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-14 02:00:28.414 00:05:01.158 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-14 02:00:29.590 00:05:04.757 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-14 02:02:28.433 00:05:01.118 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-14 02:03:29.630 00:05:02.836 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-14 02:03:27.587 00:05:01.965 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-14 02:07:49.296 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:07:49.219 00:00:00.036 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:07:49.321 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:07:49.370 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:07:49.008 00:00:00.036 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:07:49.289 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:03:57.580 00:05:10.018 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2520 1 2025-09-14 02:04:29.550 00:05:02.936 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-14 02:04:29.550 00:05:04.819 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-14 02:05:29.631 00:05:57.936 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-14 02:06:27.538 00:05:02.014 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-14 02:06:28.414 00:05:01.158 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-14 02:06:29.592 00:05:04.758 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-14 02:08:28.434 00:05:01.118 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-14 02:12:49.491 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:12:49.493 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:12:49.582 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:12:49.700 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:12:49.396 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:12:49.573 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:09:17.599 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2808 1 2025-09-14 02:09:29.632 00:05:02.838 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-14 02:09:27.589 00:05:01.965 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-14 02:10:29.551 00:05:02.938 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-14 02:10:29.551 00:05:04.818 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-14 02:11:29.631 00:05:57.936 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-14 02:12:28.415 00:05:01.159 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-14 02:12:27.538 00:05:02.015 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-14 02:12:29.592 00:05:04.758 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-14 02:17:49.443 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:17:49.566 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:17:49.563 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:17:49.441 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:17:49.363 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:17:49.357 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:14:28.435 00:05:01.118 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-14 02:14:37.605 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 3100 1 2025-09-14 02:15:29.632 00:05:02.839 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-14 02:15:27.588 00:05:01.965 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-14 02:16:29.554 00:05:02.939 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-14 02:16:29.554 00:05:04.819 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-14 02:17:29.634 00:05:57.935 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-14 02:18:28.416 00:05:01.159 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-14 02:18:27.540 00:05:02.015 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-14 02:18:29.594 00:05:04.759 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-14 02:22:49.431 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:22:49.500 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:22:49.581 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:22:49.626 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:22:49.642 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:22:49.706 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:19:57.611 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 33 2240 1 2025-09-14 02:20:28.437 00:05:01.119 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-14 02:21:27.589 00:05:01.966 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-14 02:21:29.635 00:05:02.842 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-14 02:22:29.554 00:05:02.944 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-14 02:22:29.554 00:05:04.821 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-14 02:27:49.569 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:27:49.859 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:27:49.948 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:27:49.772 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:27:49.650 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:27:49.693 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:24:27.542 00:05:02.014 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-14 02:23:29.634 00:05:57.935 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-14 02:24:28.416 00:05:01.159 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-14 02:24:29.594 00:05:04.759 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-14 02:25:17.617 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2544 1 2025-09-14 02:26:28.437 00:05:01.120 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-14 02:27:27.590 00:05:01.969 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-14 02:27:29.637 00:05:02.844 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-14 02:28:29.556 00:05:02.945 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-14 02:28:29.557 00:05:04.817 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-14 02:32:49.815 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:32:49.460 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:32:49.544 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:32:50.025 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:32:49.876 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:32:49.541 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:29:29.637 00:05:57.940 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-14 02:30:27.543 00:05:02.018 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-14 02:30:28.419 00:05:01.163 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-14 02:30:29.597 00:05:04.759 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-14 02:30:37.622 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 3028 1 2025-09-14 02:32:28.440 00:05:01.120 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-14 02:33:29.638 00:05:02.844 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-14 02:33:27.593 00:05:01.967 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-14 02:37:50.081 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:37:49.844 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:37:49.934 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:37:50.290 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:37:50.099 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:37:49.924 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:34:29.560 00:05:02.944 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-14 02:34:29.559 00:05:04.818 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-14 02:35:57.627 00:05:10.104 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2544 1 2025-09-14 02:35:29.642 00:05:57.933 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-14 02:36:28.423 00:05:01.163 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-14 02:36:27.545 00:05:02.021 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-14 02:36:29.599 00:05:04.758 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-14 02:38:28.443 00:05:01.124 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-14 02:42:49.835 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:42:50.131 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:42:50.200 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:42:49.920 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:42:49.921 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:42:49.841 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:39:27.596 00:05:01.972 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-14 02:39:29.641 00:05:02.843 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-14 02:40:29.563 00:05:02.942 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-14 02:40:29.562 00:05:04.816 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-14 02:41:17.630 00:05:10.014 OSPF 27.0.10.1:0 -> 224.0.0.5:0 43 3096 1 2025-09-14 02:42:27.546 00:05:02.021 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-14 02:41:29.646 00:05:57.931 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-14 02:42:28.425 00:05:01.163 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-14 02:42:29.607 00:05:04.753 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-14 02:47:50.422 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:47:50.427 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:47:50.494 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:47:50.423 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:47:50.217 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:47:50.343 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:44:28.445 00:05:01.124 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-14 02:45:27.597 00:05:01.972 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-14 02:45:29.648 00:05:02.837 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-14 02:46:29.568 00:05:02.937 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-14 02:46:29.569 00:05:04.812 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-14 02:46:37.644 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 33 2380 1 2025-09-14 02:47:29.648 00:05:57.930 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-14 02:48:27.546 00:05:02.023 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-14 02:48:28.425 00:05:01.164 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-14 02:48:29.609 00:05:04.752 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-14 02:52:50.053 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:52:49.814 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:52:50.102 00:00:00.043 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:52:50.265 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:52:50.220 00:00:00.039 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:52:49.895 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:50:28.446 00:05:01.125 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-14 02:51:27.598 00:05:01.972 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-14 02:51:29.650 00:05:02.854 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-14 02:51:57.651 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2608 1 2025-09-14 02:52:29.569 00:05:02.954 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-14 02:52:29.570 00:05:04.813 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-14 02:57:50.238 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-14 02:57:50.379 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 02:57:50.605 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:57:50.448 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:57:50.443 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:57:50.460 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-14 02:53:29.650 00:05:57.930 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-14 02:54:27.549 00:05:02.022 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-14 02:54:28.426 00:05:01.164 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-14 02:54:29.609 00:05:04.753 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 Summary: total flows: 173, total bytes: 114116, total packets: 1711, avg bps: 241, avg pps: 0, avg bpp: 66 Time window: 2025-09-14 01:56:28 - 2025-09-14 02:59:34 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0048s User: 0.0010s Wall: 0.0034s flows/second: 51396.4 Runtime: 0.0034s