Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 21:55:32.973 00:05:05.048 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 21:56:31.664 00:05:01.309 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 21:55:37.563 00:05:55.493 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 22:01:06.496 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:01:06.623 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:01:06.621 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:01:06.535 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:01:06.412 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:01:06.455 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:57:31.023 00:05:01.951 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 21:57:32.974 00:05:04.610 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 21:58:33.015 00:05:04.988 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 21:58:51.316 00:05:10.051 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 3060 1 2025-09-20 21:59:31.004 00:05:02.053 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 22:00:30.714 00:05:02.264 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 22:00:31.645 00:05:01.353 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 22:01:32.973 00:05:05.050 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 22:06:06.889 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:06:07.171 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:06:07.243 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:06:06.972 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:06:06.891 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:06:06.960 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:02:31.664 00:05:01.314 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 22:01:37.563 00:05:55.496 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 22:03:31.027 00:05:01.952 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 22:03:32.978 00:05:04.606 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 22:04:11.335 00:05:10.012 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 2952 1 2025-09-20 22:04:33.019 00:05:04.985 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 22:05:31.008 00:05:02.053 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 22:06:30.717 00:05:02.263 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 22:06:31.646 00:05:01.355 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 22:11:06.652 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:11:06.585 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:11:06.664 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:11:06.863 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:11:06.711 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:11:06.666 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:07:32.979 00:05:05.046 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 22:08:31.667 00:05:01.313 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 22:07:37.565 00:05:55.497 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 22:09:31.030 00:05:01.951 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 22:09:32.980 00:05:04.609 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 22:09:31.345 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2460 1 2025-09-20 22:10:33.021 00:05:04.984 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 22:11:31.013 00:05:02.048 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 22:16:06.811 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:16:06.906 00:00:00.035 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:16:06.986 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:16:06.860 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:16:06.696 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:16:06.780 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:12:30.717 00:05:02.263 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 22:12:31.648 00:05:01.354 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 22:13:32.980 00:05:05.044 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 22:13:37.568 00:05:55.494 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 22:14:31.669 00:05:01.313 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 22:14:51.350 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2792 1 2025-09-20 22:15:31.034 00:05:01.948 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 22:15:32.981 00:05:04.609 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 22:16:33.022 00:05:04.984 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 22:21:06.900 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:21:06.959 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:21:06.879 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:21:06.832 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:21:06.747 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:21:06.751 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:17:31.014 00:05:02.048 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 22:18:30.719 00:05:02.264 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 22:18:31.650 00:05:01.354 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 22:19:32.981 00:05:05.045 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 22:20:11.358 00:05:10.011 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2456 1 2025-09-20 22:20:31.672 00:05:01.313 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 22:19:37.571 00:05:55.494 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 22:21:31.035 00:05:01.949 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 22:21:32.982 00:05:04.611 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 22:26:07.280 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:26:07.223 00:00:00.045 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:26:07.310 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:26:07.086 00:00:00.037 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:26:07.013 00:00:00.044 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:26:07.006 00:00:00.036 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:22:33.023 00:05:05.004 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 22:23:31.018 00:05:02.047 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 22:24:31.657 00:05:01.349 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 22:24:30.719 00:05:02.266 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 22:25:32.985 00:05:05.045 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 22:25:31.369 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2608 1 2025-09-20 22:26:31.677 00:05:01.310 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 22:25:37.573 00:05:55.496 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 22:31:07.094 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:31:07.146 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:31:07.232 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:31:07.357 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:31:07.077 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:31:07.175 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:27:31.040 00:05:01.947 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 22:27:32.984 00:05:04.612 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 22:28:33.025 00:05:04.984 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 22:29:31.021 00:05:02.047 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 22:30:31.659 00:05:01.351 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 22:30:30.721 00:05:02.268 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 22:30:51.379 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 3128 1 2025-09-20 22:31:32.987 00:05:05.043 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 22:36:07.182 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:36:07.259 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:36:07.086 00:00:00.041 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:36:07.393 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:36:07.326 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:36:07.339 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:31:37.577 00:05:55.493 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 22:32:31.680 00:05:01.310 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 22:33:31.041 00:05:01.947 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 22:33:32.987 00:05:04.610 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 22:34:33.027 00:05:04.983 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 22:35:31.023 00:05:02.048 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 22:36:11.385 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2644 1 2025-09-20 22:36:30.725 00:05:02.263 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 22:36:31.661 00:05:01.350 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 22:41:07.370 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:41:07.500 00:00:00.019 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:41:07.539 00:00:00.016 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:41:07.368 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:41:07.282 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:41:07.287 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:37:32.988 00:05:05.043 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 22:38:31.681 00:05:01.307 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 22:37:37.578 00:05:55.492 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 22:39:31.043 00:05:01.947 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 22:39:32.988 00:05:04.611 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 22:40:33.030 00:05:04.984 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 22:41:31.023 00:05:02.048 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 22:41:31.390 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2360 1 2025-09-20 22:46:07.501 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:46:07.564 00:00:00.010 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:46:07.564 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:46:07.580 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:46:07.338 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:46:07.500 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:42:31.661 00:05:01.350 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 22:42:30.728 00:05:02.263 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 22:43:32.989 00:05:05.046 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-09-20 22:44:31.683 00:05:01.314 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 22:43:37.579 00:06:00.006 TCP 27.157.0.1:38169 -> 27.156.0.1:179 13 809 1 2025-09-20 22:45:31.043 00:05:01.954 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 22:45:32.991 00:05:04.614 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-09-20 22:46:33.031 00:05:04.987 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 22:46:51.396 00:05:00.658 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2792 1 2025-09-20 22:51:07.567 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:51:07.497 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:51:07.573 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:51:07.778 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:51:07.615 00:00:00.014 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:51:07.578 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:47:31.023 00:05:02.055 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 22:48:30.732 00:05:02.268 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-09-20 22:48:31.663 00:05:01.358 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 22:49:32.996 00:05:00.004 TCP 27.156.0.1:34437 -> 27.153.0.1:179 11 686 1 2025-09-20 22:50:31.684 00:05:01.318 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-09-20 22:50:33.078 00:05:04.509 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-09-20 22:51:32.998 00:05:00.003 TCP 27.156.0.1:179 -> 27.157.0.1:38169 11 686 1 2025-09-20 22:51:31.044 00:05:01.957 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-09-20 22:56:07.575 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:56:07.840 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:56:07.755 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:56:07.567 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-20 22:56:07.630 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-09-20 22:56:07.488 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 22:52:01.398 00:05:10.054 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2480 1 2025-09-20 22:52:33.041 00:05:04.978 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-09-20 22:53:31.026 00:05:02.055 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-09-20 22:54:31.663 00:05:01.358 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-09-20 22:54:30.734 00:05:02.269 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 Summary: total flows: 173, total bytes: 114263, total packets: 1711, avg bps: 238, avg pps: 0, avg bpp: 66 Time window: 2025-09-20 21:55:32 - 2025-09-20 22:59:33 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0021s User: 0.0031s Wall: 0.0023s flows/second: 74277.3 Runtime: 0.0023s