Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 00:55:37.517 00:05:54.934 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 00:56:31.302 00:05:01.149 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 00:56:32.531 00:05:04.456 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 01:00:41.212 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:00:41.212 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:00:41.003 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:00:41.424 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:00:41.482 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 00:56:29.609 00:05:10.900 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2520 1 2025-09-20 01:00:41.293 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 00:57:30.601 00:05:01.851 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 00:57:32.450 00:05:04.558 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 00:58:32.491 00:05:05.008 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 00:59:30.582 00:05:01.951 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 01:00:30.361 00:05:02.092 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 01:00:31.284 00:05:01.190 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 01:05:41.248 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:05:41.260 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:05:41.370 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:05:41.131 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:05:41.050 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:05:41.051 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:01:49.614 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2788 1 2025-09-20 01:01:37.520 00:05:54.935 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 01:02:31.305 00:05:01.150 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 01:02:32.532 00:05:04.456 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 01:03:30.602 00:05:01.851 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 01:03:32.453 00:05:04.559 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 01:04:32.492 00:05:05.009 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 01:05:30.582 00:05:01.952 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 01:06:31.287 00:05:01.188 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 01:06:30.364 00:05:02.091 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 01:10:42.068 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:10:42.304 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:10:42.481 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:10:42.354 00:00:00.020 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:10:42.093 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:10:42.269 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:07:09.619 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 45 3160 1 2025-09-20 01:07:37.523 00:05:54.932 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 01:08:31.307 00:05:01.148 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 01:08:32.534 00:05:04.457 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 01:09:30.604 00:05:01.851 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 01:09:32.454 00:05:04.560 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 01:10:32.494 00:05:05.008 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 01:11:30.583 00:05:01.952 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 01:15:41.473 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:15:41.399 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:15:41.480 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:15:41.497 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:15:41.684 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:15:41.682 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:12:30.363 00:05:02.092 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 01:12:31.289 00:05:01.186 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 01:12:29.626 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2772 1 2025-09-20 01:13:37.522 00:05:54.934 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 01:14:31.310 00:05:01.146 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 01:14:32.536 00:05:04.469 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 01:15:30.604 00:05:01.852 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 01:15:32.454 00:05:04.569 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 01:16:32.495 00:05:05.009 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 01:20:41.756 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:20:41.559 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:20:41.477 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:20:41.804 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:20:41.594 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:20:41.480 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:17:30.584 00:05:01.958 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 01:17:49.636 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2464 1 2025-09-20 01:18:31.293 00:05:01.184 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 01:18:30.365 00:05:02.092 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 01:19:37.523 00:05:54.936 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 01:20:31.313 00:05:01.146 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 01:20:32.537 00:05:04.469 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 01:21:30.606 00:05:01.854 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 01:21:32.456 00:05:04.570 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 01:25:41.936 00:00:00.010 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:25:41.859 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:25:41.863 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:25:42.030 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:25:41.819 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:25:41.778 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:22:32.502 00:05:05.006 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 01:23:09.645 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2456 1 2025-09-20 01:23:30.585 00:05:01.956 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 01:24:30.365 00:05:02.095 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 01:24:31.293 00:05:01.187 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 01:25:37.524 00:05:54.936 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 01:26:31.313 00:05:01.147 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 01:26:32.539 00:05:04.469 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 01:30:42.166 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:30:41.829 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:30:42.376 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:30:42.053 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:30:41.912 00:00:00.020 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:30:41.917 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:27:30.606 00:05:01.855 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 01:27:32.459 00:05:04.568 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 01:28:32.502 00:05:05.005 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 01:28:29.654 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2932 1 2025-09-20 01:29:30.589 00:05:01.953 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 01:30:30.368 00:05:02.094 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 01:30:31.294 00:05:01.187 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 01:35:41.773 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:35:41.766 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:35:41.860 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:35:41.983 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:35:42.120 00:00:00.026 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:35:41.846 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:31:37.525 00:05:54.937 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 01:32:31.315 00:05:01.147 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 01:32:32.541 00:05:04.475 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 01:33:30.608 00:05:01.854 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 01:33:32.461 00:05:04.575 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 01:33:49.663 00:05:10.243 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 2888 1 2025-09-20 01:34:32.501 00:05:05.006 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 01:35:30.588 00:05:01.956 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 01:36:31.296 00:05:01.186 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 01:36:30.368 00:05:02.095 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 01:40:41.922 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:40:41.922 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:40:41.910 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:40:42.133 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:40:42.128 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:40:42.004 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:37:37.527 00:05:54.938 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 01:38:31.316 00:05:01.149 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 01:38:32.543 00:05:04.474 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 01:39:09.670 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2652 1 2025-09-20 01:39:30.610 00:05:01.854 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 01:39:32.462 00:05:04.585 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 01:40:32.504 00:05:05.005 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 01:41:30.592 00:05:01.954 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 01:45:42.112 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:45:42.108 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:45:42.088 00:00:00.030 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:45:42.318 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:45:42.158 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:45:42.192 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:42:31.298 00:05:01.187 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 01:42:30.372 00:05:02.093 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 01:43:37.529 00:05:54.937 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 01:44:31.319 00:05:01.147 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 01:44:32.544 00:05:04.473 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 01:44:29.679 00:05:10.012 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2504 1 2025-09-20 01:45:30.615 00:05:01.850 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 01:45:32.465 00:05:04.585 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 01:50:42.144 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:50:42.144 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:46:32.506 00:05:05.005 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 01:50:42.382 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:50:42.355 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:50:42.498 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:50:42.225 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:47:30.595 00:05:01.950 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 01:48:30.373 00:05:02.093 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 01:48:31.299 00:05:01.187 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 01:49:49.692 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2664 1 2025-09-20 01:49:37.530 00:05:54.938 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 01:50:31.320 00:05:01.147 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 01:50:32.546 00:05:04.490 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 01:51:30.617 00:05:01.851 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 01:51:32.466 00:05:04.591 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 01:55:42.293 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:55:42.429 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:55:42.422 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:55:42.431 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 01:55:42.219 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 01:55:42.352 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 01:52:32.505 00:05:05.006 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 01:53:30.597 00:05:01.952 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 01:54:30.375 00:05:02.094 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 01:54:31.299 00:05:01.189 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 Summary: total flows: 173, total bytes: 114364, total packets: 1714, avg bps: 238, avg pps: 0, avg bpp: 66 Time window: 2025-09-20 00:55:37 - 2025-09-20 01:59:32 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0025s User: 0.0025s Wall: 0.0019s flows/second: 91722.2 Runtime: 0.0019s