Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 08:54:52.807 00:05:52.890 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 08:55:45.778 00:05:07.011 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 08:56:43.974 00:05:01.724 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 08:56:43.714 00:05:01.984 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 08:57:45.739 00:05:06.826 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 08:57:45.696 00:05:57.241 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 08:58:43.696 00:05:02.084 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 08:58:45.697 00:05:06.886 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 08:59:23.821 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2836 1 2025-10-17 09:03:50.752 00:00:00.014 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:03:50.821 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:03:50.634 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:03:50.510 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:03:50.610 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:03:50.430 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:00:43.957 00:05:01.762 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 09:00:52.809 00:05:52.890 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 09:01:45.779 00:05:07.011 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 09:02:43.977 00:05:01.722 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 09:02:43.716 00:05:01.983 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 09:03:45.739 00:05:06.828 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 09:03:45.697 00:05:57.242 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 09:04:43.695 00:05:02.084 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 09:08:50.638 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:08:50.780 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:04:45.698 00:05:06.887 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 09:08:50.907 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:08:50.848 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:08:50.923 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:04:43.822 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2480 1 2025-10-17 09:08:50.860 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:06:43.958 00:05:01.761 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 09:06:52.810 00:05:52.889 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 09:07:45.780 00:05:07.012 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 09:08:43.978 00:05:01.722 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 09:08:43.716 00:05:01.984 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 09:13:50.829 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:13:50.753 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:09:45.740 00:05:06.828 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 09:13:50.834 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:13:50.916 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:13:51.041 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:13:50.954 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:10:03.832 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2644 1 2025-10-17 09:09:45.699 00:05:57.241 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 09:10:43.698 00:05:02.091 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 09:10:45.699 00:05:06.888 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 09:12:43.959 00:05:01.773 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 09:12:52.811 00:05:52.902 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 09:13:45.780 00:05:07.013 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 09:18:51.034 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:18:51.066 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:18:50.906 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:18:50.938 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:14:43.984 00:05:01.729 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 09:14:43.718 00:05:01.995 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 09:18:50.856 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:18:50.858 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:15:23.839 00:05:00.677 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2500 1 2025-10-17 09:15:45.749 00:05:06.823 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 09:15:45.708 00:05:57.233 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 09:16:43.699 00:05:02.096 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 09:16:45.712 00:05:06.880 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 09:18:43.966 00:05:01.769 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 09:18:52.812 00:05:52.902 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 09:23:51.020 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:23:51.086 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:23:51.075 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:19:45.794 00:05:07.000 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 09:23:50.956 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:23:50.875 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:23:50.875 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:20:43.986 00:05:01.730 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 09:20:43.719 00:05:01.997 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 09:20:33.842 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2844 1 2025-10-17 09:21:45.754 00:05:06.819 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 09:21:45.713 00:05:57.229 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 09:22:43.699 00:05:02.100 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 09:22:45.714 00:05:06.878 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 09:24:43.966 00:05:01.769 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 09:28:51.293 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:28:51.468 00:00:00.038 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:28:51.405 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:28:51.406 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:28:51.258 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:28:51.326 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:24:52.813 00:05:52.901 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 09:25:45.798 00:05:06.998 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 09:25:53.847 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2852 1 2025-10-17 09:26:43.988 00:05:01.727 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 09:26:43.721 00:05:01.994 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 09:27:45.769 00:05:06.805 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 09:27:45.714 00:05:57.229 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 09:28:43.700 00:05:02.103 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 09:28:45.714 00:05:06.879 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 09:33:51.282 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:33:51.225 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:33:51.412 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:33:51.410 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:33:51.200 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:33:51.200 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:30:43.968 00:05:01.768 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 09:31:13.853 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2688 1 2025-10-17 09:30:52.814 00:05:52.902 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 09:31:45.795 00:05:07.001 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 09:32:43.988 00:05:01.729 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 09:32:43.722 00:05:01.995 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 09:33:45.757 00:05:06.818 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 09:33:45.716 00:05:57.229 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 09:34:43.702 00:05:02.095 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 09:38:51.330 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:38:51.455 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:38:51.444 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:38:51.330 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:34:45.717 00:05:06.878 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 09:38:51.246 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:38:51.250 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:36:43.970 00:05:01.768 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 09:36:33.859 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2788 1 2025-10-17 09:36:52.816 00:05:52.902 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 09:37:45.799 00:05:07.010 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 09:38:43.992 00:05:01.728 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 09:38:43.725 00:05:01.995 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 09:43:51.334 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:43:51.614 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:43:51.661 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:39:45.757 00:05:06.819 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 09:43:51.493 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:43:51.403 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:43:51.412 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:39:45.718 00:05:57.231 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 09:40:43.706 00:05:02.093 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 09:40:45.719 00:05:06.878 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 09:41:53.863 00:05:11.020 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2504 1 2025-10-17 09:42:43.971 00:05:01.768 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 09:42:52.827 00:05:52.892 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 09:43:45.799 00:05:07.010 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 09:44:43.993 00:05:01.727 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 09:44:43.728 00:05:01.992 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 09:48:51.604 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:48:51.513 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:48:51.602 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:48:51.815 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:48:51.810 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:48:51.593 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:45:45.759 00:05:06.818 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 09:45:45.718 00:05:57.231 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 09:46:43.707 00:05:02.092 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 09:46:45.718 00:05:06.880 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 09:47:13.869 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2684 1 2025-10-17 09:48:43.973 00:05:01.767 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 09:53:52.480 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:53:52.437 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:53:52.652 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:49:45.799 00:05:07.010 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-17 09:53:52.472 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:48:52.827 00:05:52.892 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-17 09:53:52.226 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:53:52.391 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 09:50:43.994 00:05:01.725 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-17 09:50:43.727 00:05:01.992 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-17 09:51:45.759 00:05:06.818 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-17 09:51:45.720 00:05:57.233 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-17 09:52:43.708 00:05:02.092 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-17 09:52:33.877 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2640 1 2025-10-17 09:52:45.720 00:05:06.878 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-17 09:54:43.975 00:05:01.765 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-17 09:58:51.825 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:58:52.022 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:58:51.886 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:58:51.898 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-17 09:58:51.812 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-17 09:58:51.817 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 114024, total packets: 1709, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-10-17 08:54:52 - 2025-10-17 09:59:45 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0053s User: 0.0009s Wall: 0.0027s flows/second: 64378.9 Runtime: 0.0027s