Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 11:55:37.784 00:05:54.909 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 11:56:31.496 00:05:01.197 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 11:56:32.772 00:05:04.515 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:00:54.510 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:00:54.635 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:00:54.561 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:00:54.599 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:00:54.424 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:00:54.518 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 11:56:50.512 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 3012 1 2025-09-20 11:57:30.828 00:05:01.866 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 11:57:32.692 00:05:04.615 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 11:58:32.731 00:05:05.034 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 11:59:30.809 00:05:01.964 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:00:30.542 00:05:02.151 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:00:31.475 00:05:01.237 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:05:54.513 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:05:54.459 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:05:54.534 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:05:54.730 00:00:00.015 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:05:54.864 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:05:54.539 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:02:10.520 00:05:10.899 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2768 1 2025-09-20 12:01:37.785 00:05:54.909 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:02:31.496 00:05:01.198 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:02:32.773 00:05:04.515 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:03:30.832 00:05:01.861 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:03:32.694 00:05:04.615 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:04:32.733 00:05:05.033 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:05:30.811 00:05:01.963 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:06:31.477 00:05:01.238 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:06:30.544 00:05:02.151 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:10:54.647 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:10:54.650 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:10:54.784 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:10:54.861 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:10:54.783 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:10:54.727 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:07:30.527 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2524 1 2025-09-20 12:07:37.786 00:05:54.909 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:08:31.497 00:05:01.198 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:08:32.774 00:05:04.516 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:09:30.833 00:05:01.862 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:09:32.694 00:05:04.616 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:10:32.734 00:05:05.046 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:11:30.812 00:05:01.963 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:15:54.574 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:15:54.639 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:15:54.833 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:15:54.785 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:15:54.850 00:00:00.026 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:15:54.719 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:12:30.544 00:05:02.151 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:12:31.479 00:05:01.236 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:12:50.531 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2916 1 2025-09-20 12:13:37.792 00:05:54.905 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:14:31.499 00:05:01.198 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:14:32.775 00:05:04.516 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:15:30.834 00:05:01.863 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:15:32.696 00:05:04.617 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:16:32.736 00:05:05.046 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:20:54.837 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:20:54.772 00:00:00.027 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:20:54.864 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:20:55.048 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:20:54.981 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:20:54.853 00:00:00.026 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:17:30.813 00:05:01.963 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:18:10.535 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2400 1 2025-09-20 12:18:31.479 00:05:01.237 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:18:30.548 00:05:02.149 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:19:37.802 00:05:54.895 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:20:31.500 00:05:01.197 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:20:32.777 00:05:04.516 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:21:30.834 00:05:01.863 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:21:32.697 00:05:04.616 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:25:54.896 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:25:55.020 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:25:55.020 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:25:54.889 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:25:54.809 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:25:54.809 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:22:32.737 00:05:05.047 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:23:30.813 00:05:01.964 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:23:30.542 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2924 1 2025-09-20 12:24:30.548 00:05:02.149 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:24:31.480 00:05:01.237 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:25:37.804 00:05:54.897 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:26:31.501 00:05:01.200 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:26:32.777 00:05:04.516 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:30:54.896 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:30:55.088 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:30:54.963 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:30:55.104 00:00:00.041 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:30:54.685 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:30:54.882 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:27:30.837 00:05:01.864 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:27:32.697 00:05:04.616 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:28:32.738 00:05:05.047 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:28:50.549 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2688 1 2025-09-20 12:29:30.819 00:05:01.964 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:30:30.549 00:05:02.151 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:30:31.480 00:05:01.240 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:35:55.180 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:35:55.189 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:35:54.985 00:00:00.027 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:35:55.391 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:35:55.287 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:35:55.269 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:31:37.804 00:05:54.903 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:32:31.501 00:05:01.206 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:32:32.781 00:05:04.516 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:33:30.838 00:05:01.868 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:33:32.702 00:05:04.616 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:34:10.554 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 2856 1 2025-09-20 12:34:32.742 00:05:05.045 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:35:30.819 00:05:01.969 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:36:30.551 00:05:02.156 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:36:31.483 00:05:01.246 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:40:55.159 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:40:55.159 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:40:55.241 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:40:55.370 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:40:55.213 00:00:00.040 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:40:55.239 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:37:37.806 00:05:54.902 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:38:31.503 00:05:01.205 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:38:32.787 00:05:04.510 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:39:30.840 00:05:01.868 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:39:32.708 00:05:04.610 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:39:30.557 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2564 1 2025-09-20 12:40:32.747 00:05:05.041 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:41:30.822 00:05:01.968 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:45:55.306 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:45:55.208 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:45:55.428 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:45:55.521 00:00:00.018 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:45:55.459 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:45:55.289 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:42:31.485 00:05:01.244 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:42:30.554 00:05:02.157 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:43:37.808 00:05:54.902 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:44:31.506 00:05:01.204 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:44:32.789 00:05:04.511 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:44:50.565 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2608 1 2025-09-20 12:45:30.842 00:05:01.868 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:45:32.709 00:05:04.611 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:46:32.749 00:05:05.041 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:50:55.413 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:50:55.220 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:50:55.388 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:50:55.625 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:50:55.580 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:50:55.302 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:47:30.822 00:05:01.968 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:48:31.488 00:05:01.242 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 12:48:30.555 00:05:02.156 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:50:10.572 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2456 1 2025-09-20 12:49:37.811 00:05:54.899 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 12:50:31.508 00:05:01.202 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 12:50:32.789 00:05:04.511 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 12:51:30.843 00:05:01.868 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 12:51:32.710 00:05:04.613 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 12:55:55.511 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 12:55:55.314 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:55:55.771 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:55:55.393 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:55:55.557 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:55:55.721 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 12:52:32.750 00:05:05.042 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 12:53:30.823 00:05:01.970 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 12:54:30.555 00:05:02.157 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 12:54:31.489 00:05:01.243 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 Summary: total flows: 173, total bytes: 114280, total packets: 1713, avg bps: 238, avg pps: 0, avg bpp: 66 Time window: 2025-09-20 11:55:37 - 2025-09-20 12:59:32 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0037s User: 0.0019s Wall: 0.0026s flows/second: 65726.0 Runtime: 0.0027s