Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 04:54:04.109 00:05:52.943 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 04:54:57.090 00:05:07.111 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 04:59:50.622 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 04:59:50.562 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 04:59:50.610 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 04:59:50.690 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 04:59:50.480 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 04:59:50.481 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 04:55:57.133 00:05:06.960 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 04:56:55.519 00:05:01.547 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 04:56:55.549 00:05:01.517 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 04:56:57.053 00:05:07.168 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 04:57:54.329 00:05:02.724 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 04:58:55.529 00:05:01.605 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 04:59:00.016 00:05:10.026 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2480 1 2025-11-09 04:59:55.501 00:05:01.574 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 05:04:50.636 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:04:50.590 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:04:50.724 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:04:50.461 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:04:50.379 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:04:50.382 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:00:04.113 00:05:52.943 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 05:00:57.092 00:05:07.109 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 05:01:57.147 00:05:06.947 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 05:02:55.521 00:05:01.534 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 05:02:55.553 00:05:01.502 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 05:02:57.053 00:05:07.168 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 05:03:54.330 00:05:02.726 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 05:04:20.041 00:05:10.015 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-09 05:04:55.533 00:05:01.606 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 05:09:50.638 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:09:50.676 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:09:50.734 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:09:50.585 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:09:50.522 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:09:50.556 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:05:55.502 00:05:01.577 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 05:06:04.114 00:05:52.948 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 05:06:57.096 00:05:07.109 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 05:07:57.136 00:05:06.960 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 05:08:55.521 00:05:01.540 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 05:08:55.552 00:05:01.509 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 05:08:57.056 00:05:07.168 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 05:09:40.057 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-09 05:09:54.331 00:05:02.731 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 05:14:50.592 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:14:50.603 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:14:50.674 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:14:50.803 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:14:50.709 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:14:50.683 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:10:55.533 00:05:01.609 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 05:11:55.504 00:05:01.580 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 05:12:04.116 00:05:52.949 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 05:12:57.102 00:05:07.107 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 05:13:57.143 00:05:06.956 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 05:14:55.524 00:05:01.543 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 05:14:55.558 00:05:01.509 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 05:14:57.061 00:05:07.167 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 05:15:00.065 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 3092 1 2025-11-09 05:19:50.718 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:19:50.917 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:19:50.847 00:00:00.028 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:19:50.785 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:19:50.705 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:19:50.707 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:15:54.333 00:05:02.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 05:16:55.539 00:05:01.608 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 05:17:55.503 00:05:01.583 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 05:18:04.118 00:05:52.948 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 05:18:57.106 00:05:07.103 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 05:19:57.146 00:05:06.954 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 05:20:20.070 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2940 1 2025-11-09 05:24:50.720 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:24:50.867 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:24:51.110 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:24:50.948 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:24:50.990 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:24:50.931 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:20:55.524 00:05:01.543 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 05:20:55.559 00:05:01.508 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 05:20:57.066 00:05:07.163 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 05:21:54.336 00:05:02.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 05:22:55.540 00:05:01.610 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 05:23:55.505 00:05:01.586 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 05:24:04.120 00:05:52.949 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 05:24:57.106 00:05:07.104 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 05:29:50.899 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:29:50.831 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:29:50.911 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:29:50.988 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:29:51.110 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:29:50.940 00:00:00.028 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:25:40.076 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2560 1 2025-11-09 05:25:57.147 00:05:06.954 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 05:26:55.525 00:05:01.545 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 05:26:55.560 00:05:01.510 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 05:26:57.069 00:05:07.165 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 05:27:54.337 00:05:02.734 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 05:28:55.542 00:05:01.616 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 05:29:55.505 00:05:01.590 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 05:34:50.851 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:34:51.193 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:34:51.137 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:34:51.016 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:34:50.982 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:34:50.935 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:30:04.121 00:05:52.954 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 05:30:57.110 00:05:07.104 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 05:31:00.078 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2440 1 2025-11-09 05:31:57.151 00:05:06.951 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 05:32:55.526 00:05:01.551 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 05:32:55.563 00:05:01.514 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 05:32:57.070 00:05:07.164 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 05:33:54.339 00:05:02.737 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 05:34:55.544 00:05:01.613 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 05:39:51.907 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:39:51.836 00:00:00.027 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:39:51.918 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:39:52.119 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:39:52.120 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:39:51.917 00:00:00.027 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:35:55.506 00:05:01.591 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 05:36:20.084 00:05:10.002 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-09 05:36:04.122 00:05:52.954 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 05:36:57.116 00:05:07.099 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 05:37:57.157 00:05:06.950 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 05:38:55.526 00:05:01.551 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 05:38:55.564 00:05:01.513 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 05:38:57.076 00:05:07.159 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 05:39:54.342 00:05:02.736 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 05:44:51.470 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:44:51.279 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:44:51.273 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:44:51.332 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:44:51.069 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:44:51.253 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:40:55.544 00:05:01.614 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 05:41:40.086 00:05:10.092 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 2992 1 2025-11-09 05:41:55.508 00:05:01.590 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 05:42:04.128 00:05:52.953 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 05:42:57.118 00:05:07.098 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 05:43:57.158 00:05:06.951 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 05:44:55.529 00:05:01.552 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 05:44:55.566 00:05:01.515 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 05:44:57.078 00:05:07.159 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 05:49:51.532 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:49:51.761 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:49:51.719 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:49:51.626 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:49:51.550 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:49:51.545 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:45:54.348 00:05:02.732 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 05:46:55.545 00:05:01.615 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 05:47:00.093 00:05:10.012 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2852 1 2025-11-09 05:47:55.508 00:05:01.593 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 05:48:04.129 00:05:52.952 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 05:48:57.120 00:05:07.097 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 05:49:57.160 00:05:06.950 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 05:54:51.386 00:00:00.028 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 05:54:51.386 00:00:00.028 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:54:51.577 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:54:51.598 00:00:00.027 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:54:51.445 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:54:51.468 00:00:00.027 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 05:50:55.530 00:05:01.552 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 05:50:55.566 00:05:01.516 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 05:50:57.079 00:05:07.159 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 05:51:54.346 00:05:02.736 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 05:52:20.106 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2812 1 2025-11-09 05:52:55.546 00:05:01.616 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 05:53:55.512 00:05:01.591 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 Summary: total flows: 173, total bytes: 114532, total packets: 1717, avg bps: 235, avg pps: 0, avg bpp: 66 Time window: 2025-11-09 04:54:04 - 2025-11-09 05:58:57 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0045s User: 0.0011s Wall: 0.0024s flows/second: 70757.2 Runtime: 0.0025s