Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 02:54:52.682 00:05:52.899 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 02:55:45.660 00:05:07.005 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 02:56:43.873 00:05:01.707 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 02:56:43.602 00:05:01.978 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 02:57:33.348 00:05:10.019 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2644 1 2025-10-17 02:57:45.619 00:05:06.813 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 02:57:45.579 00:05:57.239 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 02:58:43.582 00:05:02.079 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 02:58:45.580 00:05:06.872 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 03:03:43.616 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:03:43.738 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:03:43.729 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:03:43.668 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:03:43.528 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:03:43.587 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:00:43.854 00:05:01.747 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 03:00:52.685 00:05:52.896 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 03:01:45.661 00:05:07.005 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 03:02:43.879 00:05:01.703 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 03:02:43.604 00:05:01.978 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 03:02:53.367 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2504 1 2025-10-17 03:03:45.621 00:05:06.813 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 03:08:43.586 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:08:43.627 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:08:43.703 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:08:43.494 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:08:43.417 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:08:43.414 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:03:45.580 00:05:57.239 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 03:04:43.583 00:05:02.079 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 03:04:45.580 00:05:06.873 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 03:06:43.855 00:05:01.748 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 03:06:52.687 00:05:52.897 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 03:07:45.661 00:05:07.019 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 03:08:13.370 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2684 1 2025-10-17 03:08:43.875 00:05:01.707 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 03:08:43.603 00:05:01.979 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 03:13:43.491 00:00:00.031 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:13:43.786 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:13:43.850 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:13:43.664 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:13:43.576 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:13:43.583 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:09:45.622 00:05:06.814 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 03:09:45.583 00:05:57.239 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 03:10:43.584 00:05:02.079 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 03:10:45.583 00:05:06.874 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 03:12:43.856 00:05:01.747 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 03:12:52.701 00:05:52.883 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 03:13:33.374 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2704 1 2025-10-17 03:13:45.663 00:05:07.017 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 03:18:43.652 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:18:43.858 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:18:43.767 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:18:43.857 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:18:43.646 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:18:43.775 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:14:43.876 00:05:01.708 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 03:14:43.606 00:05:01.978 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 03:15:45.623 00:05:06.815 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 03:15:45.583 00:05:57.245 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 03:16:43.587 00:05:02.078 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 03:16:45.583 00:05:06.875 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 03:18:43.856 00:05:01.749 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 03:18:53.379 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 3040 1 2025-10-17 03:23:43.832 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:23:44.124 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:18:52.700 00:05:52.886 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 03:23:43.912 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:23:44.209 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:23:44.333 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:23:44.195 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:19:45.664 00:05:07.017 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 03:20:43.877 00:05:01.711 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 03:20:43.608 00:05:01.980 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 03:21:45.624 00:05:06.816 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 03:21:45.585 00:05:57.244 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 03:22:43.589 00:05:02.079 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 03:22:45.585 00:05:06.876 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 03:24:13.388 00:05:11.013 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2708 1 2025-10-17 03:28:43.842 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:28:43.785 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:28:43.925 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:28:43.865 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:24:43.859 00:05:01.750 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 03:28:44.053 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:28:43.980 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:24:52.702 00:05:52.888 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 03:25:45.668 00:05:07.015 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 03:26:43.880 00:05:01.710 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 03:26:43.611 00:05:01.979 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 03:27:45.628 00:05:06.821 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 03:27:45.588 00:05:57.242 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 03:28:43.591 00:05:02.079 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 03:28:45.589 00:05:06.876 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 03:33:43.886 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:33:43.887 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:33:43.967 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:29:33.392 00:05:10.014 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2584 1 2025-10-17 03:33:43.966 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:33:44.095 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:33:44.161 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:30:43.860 00:05:01.750 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 03:30:52.702 00:05:52.887 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 03:31:45.669 00:05:07.017 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 03:32:43.882 00:05:01.709 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 03:32:43.612 00:05:01.979 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 03:33:45.630 00:05:06.817 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 03:38:43.953 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:38:44.147 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:34:43.592 00:05:02.079 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 03:38:44.285 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:38:44.172 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:38:43.874 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:33:45.590 00:05:57.242 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 03:38:44.075 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:34:45.590 00:05:06.877 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 03:34:53.407 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2480 1 2025-10-17 03:36:43.863 00:05:01.749 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 03:36:52.706 00:05:52.886 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 03:37:45.670 00:05:07.016 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 03:38:43.883 00:05:01.709 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 03:38:43.615 00:05:01.977 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 03:43:44.236 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:43:44.009 00:00:00.044 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:43:44.345 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:43:44.088 00:00:00.045 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:43:44.321 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:43:44.447 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:39:45.631 00:05:06.816 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 03:40:13.415 00:05:10.012 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2908 1 2025-10-17 03:39:45.591 00:05:57.243 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 03:40:43.595 00:05:02.078 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 03:40:45.590 00:05:06.877 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 03:42:43.864 00:05:01.750 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 03:42:52.708 00:05:52.887 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 03:43:45.673 00:05:07.015 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 03:48:44.491 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:48:44.715 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:48:44.607 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:48:44.631 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:44:43.617 00:05:01.976 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 03:48:44.505 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:48:44.552 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:44:43.884 00:05:01.709 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 03:45:33.427 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2816 1 2025-10-17 03:45:45.633 00:05:06.816 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 03:45:45.592 00:05:57.245 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 03:46:43.597 00:05:02.077 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 03:46:45.592 00:05:06.877 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 03:48:43.868 00:05:01.751 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 03:53:44.364 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:53:44.414 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:48:52.707 00:05:52.886 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 03:53:44.496 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:53:44.574 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:53:44.716 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:53:44.495 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:49:45.673 00:05:07.016 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 03:50:43.617 00:05:01.977 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 03:50:43.887 00:05:01.706 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 03:50:53.432 00:05:10.002 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2608 1 2025-10-17 03:51:45.634 00:05:06.821 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 03:51:45.593 00:05:57.247 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 03:52:43.598 00:05:02.076 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 03:52:45.593 00:05:06.882 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 03:58:44.426 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 03:58:44.604 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 03:58:44.684 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:58:44.420 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:54:43.868 00:05:01.746 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 03:58:44.636 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 03:58:44.690 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 Summary: total flows: 173, total bytes: 114244, total packets: 1713, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-10-17 02:54:52 - 2025-10-17 03:59:45 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0048s User: 0.0008s Wall: 0.0033s flows/second: 51967.0 Runtime: 0.0034s