Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 03:55:37.594 00:05:54.921 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 03:56:31.357 00:05:01.158 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 03:56:32.596 00:05:04.526 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 04:00:44.982 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:00:44.919 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:00:45.163 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:00:45.129 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:00:45.051 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:00:45.062 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 03:57:30.666 00:05:01.849 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 03:57:32.515 00:05:04.627 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 03:57:29.848 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 2888 1 2025-09-20 03:58:32.555 00:05:05.023 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 03:59:30.645 00:05:01.950 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 04:00:31.337 00:05:01.198 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 04:00:30.416 00:05:02.099 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 04:05:44.910 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:05:44.707 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:05:44.807 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:05:45.121 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:05:45.005 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:05:44.787 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:01:37.596 00:05:54.923 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 04:02:31.359 00:05:01.160 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 04:02:32.596 00:05:04.527 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 04:02:49.857 00:05:10.257 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2772 1 2025-09-20 04:03:30.666 00:05:01.853 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 04:03:32.516 00:05:04.627 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 04:04:32.557 00:05:05.022 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 04:05:30.647 00:05:01.953 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 04:06:30.418 00:05:02.103 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 04:06:31.341 00:05:01.199 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 04:10:45.255 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:10:44.994 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:10:45.162 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:10:45.052 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:10:44.950 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:10:45.174 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:08:09.872 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2464 1 2025-09-20 04:07:37.597 00:05:54.923 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 04:08:31.362 00:05:01.158 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 04:08:32.600 00:05:04.524 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 04:09:30.667 00:05:01.854 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 04:09:32.520 00:05:04.624 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 04:10:32.560 00:05:05.019 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 04:11:30.647 00:05:01.955 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 04:15:46.463 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:15:46.462 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:15:46.542 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:15:46.672 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:15:46.710 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:15:46.541 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:12:30.418 00:05:02.104 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 04:12:31.342 00:05:01.202 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 04:13:29.868 00:05:10.013 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2520 1 2025-09-20 04:13:37.598 00:05:54.925 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 04:14:31.362 00:05:01.161 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 04:14:32.601 00:05:04.525 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 04:15:30.669 00:05:01.855 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 04:15:32.521 00:05:04.625 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 04:16:32.561 00:05:05.019 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 04:20:45.156 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:20:45.266 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:20:45.227 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:20:45.348 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:20:45.138 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:20:45.186 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:17:30.649 00:05:01.955 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 04:18:30.420 00:05:02.104 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 04:18:31.343 00:05:01.201 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 04:18:49.882 00:05:10.002 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 3012 1 2025-09-20 04:19:37.600 00:05:54.924 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 04:20:31.363 00:05:01.161 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 04:20:32.603 00:05:04.523 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 04:21:30.671 00:05:01.853 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 04:21:32.524 00:05:04.623 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 04:25:45.348 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:25:45.554 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:25:45.691 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:25:45.503 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:25:45.344 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:25:45.422 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:22:32.564 00:05:05.018 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 04:23:30.651 00:05:01.956 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 04:24:09.883 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2744 1 2025-09-20 04:24:30.419 00:05:02.108 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 04:24:31.345 00:05:01.203 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 04:25:37.601 00:05:54.927 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 04:26:31.364 00:05:01.164 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 04:26:32.605 00:05:04.523 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 04:30:45.358 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:30:45.406 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:30:45.490 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:30:45.481 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:30:45.195 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:30:45.401 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:27:30.673 00:05:01.855 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 04:27:32.527 00:05:04.621 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 04:28:32.567 00:05:05.018 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 04:29:30.654 00:05:01.955 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 04:29:29.889 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2860 1 2025-09-20 04:30:30.422 00:05:02.107 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 04:30:31.344 00:05:01.205 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 04:35:45.418 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:35:45.443 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:35:45.540 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:35:45.314 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:35:45.236 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:35:45.234 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:31:37.606 00:05:54.931 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 04:32:31.366 00:05:01.171 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 04:32:32.609 00:05:04.519 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 04:33:30.675 00:05:01.860 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 04:33:32.529 00:05:04.620 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 04:34:32.570 00:05:05.018 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 04:34:49.895 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2504 1 2025-09-20 04:35:30.655 00:05:01.959 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 04:36:30.422 00:05:02.112 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 04:36:31.347 00:05:01.208 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 04:40:45.621 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:40:45.624 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:40:45.581 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:40:45.832 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:40:45.770 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:40:45.705 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:37:37.609 00:05:54.927 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 04:38:31.369 00:05:01.167 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 04:38:32.622 00:05:04.507 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 04:39:30.677 00:05:01.859 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 04:39:32.535 00:05:04.615 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 04:40:09.898 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2544 1 2025-09-20 04:40:32.576 00:05:05.015 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 04:41:30.656 00:05:01.959 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 04:45:45.464 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:45:45.710 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:45:45.894 00:00:00.012 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:45:45.765 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:45:45.500 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:45:45.685 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:42:31.346 00:05:01.209 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 04:42:30.423 00:05:02.113 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 04:43:37.610 00:05:54.927 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 04:44:31.368 00:05:01.169 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 04:44:32.615 00:05:04.515 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 04:45:30.677 00:05:01.860 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 04:45:32.535 00:05:04.620 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 04:45:29.902 00:05:10.057 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2924 1 2025-09-20 04:46:32.575 00:05:05.026 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 04:50:45.950 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:50:46.022 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:50:45.938 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:50:45.890 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:50:45.812 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:50:45.811 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:47:30.656 00:05:01.961 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 04:48:31.348 00:05:01.209 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 04:48:30.423 00:05:02.114 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 04:49:37.620 00:05:54.917 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 04:50:31.370 00:05:01.167 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 04:50:32.618 00:05:04.518 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 04:50:49.911 00:05:00.978 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2540 1 2025-09-20 04:51:30.681 00:05:01.856 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 04:51:32.537 00:05:04.619 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 04:55:46.161 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 04:55:45.906 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 04:55:46.314 00:00:00.028 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:55:45.988 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:55:45.992 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:55:46.373 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 04:52:32.577 00:05:05.029 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 04:53:30.661 00:05:01.958 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 04:54:30.425 00:05:02.114 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 04:54:31.351 00:05:01.209 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 Summary: total flows: 173, total bytes: 114336, total packets: 1714, avg bps: 238, avg pps: 0, avg bpp: 66 Time window: 2025-09-20 03:55:37 - 2025-09-20 04:59:32 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0022s User: 0.0033s Wall: 0.0023s flows/second: 76646.7 Runtime: 0.0023s