Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 09:54:04.196 00:05:52.958 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 09:54:57.194 00:05:07.088 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 09:59:56.152 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 09:59:56.147 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 09:59:56.236 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 09:59:56.361 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 09:59:56.554 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 09:59:56.226 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 09:55:57.234 00:05:06.944 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 09:56:55.602 00:05:01.553 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 09:56:55.666 00:05:01.489 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 09:56:57.156 00:05:07.149 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 09:57:30.406 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 2944 1 2025-11-09 09:57:54.439 00:05:02.717 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 09:58:55.646 00:05:01.591 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 09:59:55.582 00:05:01.594 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 10:04:56.469 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:04:56.386 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:04:56.661 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:04:56.507 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:04:56.451 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:04:56.390 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:00:04.198 00:05:52.959 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 10:00:57.195 00:05:07.091 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 10:01:57.235 00:05:06.945 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 10:02:55.603 00:05:01.554 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 10:02:55.667 00:05:01.490 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 10:02:50.411 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2708 1 2025-11-09 10:02:57.157 00:05:07.149 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 10:03:54.440 00:05:02.716 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 10:04:55.646 00:05:01.592 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 10:09:56.688 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:05:55.587 00:05:01.592 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 10:09:56.820 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:09:56.720 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:09:56.600 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:09:56.610 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:09:56.520 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:06:04.202 00:05:52.958 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 10:06:57.197 00:05:07.090 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 10:07:57.237 00:05:06.947 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 10:08:10.416 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2732 1 2025-11-09 10:08:55.609 00:05:01.552 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 10:08:55.670 00:05:01.491 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 10:08:57.157 00:05:07.149 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 10:09:54.444 00:05:02.716 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 10:14:56.634 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:10:55.649 00:05:01.591 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 10:14:56.934 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:14:56.758 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:14:56.769 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:14:56.724 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:14:56.689 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:11:55.588 00:05:01.592 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 10:12:04.203 00:05:52.957 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 10:12:57.200 00:05:07.088 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 10:13:30.422 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2560 1 2025-11-09 10:13:57.240 00:05:06.946 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 10:14:55.608 00:05:01.553 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 10:14:55.669 00:05:01.492 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 10:14:57.159 00:05:07.148 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 10:19:56.707 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:19:56.442 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:15:54.446 00:05:02.716 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 10:19:56.728 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:19:56.918 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:19:56.916 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:19:56.522 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:16:55.650 00:05:01.593 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 10:17:55.590 00:05:01.594 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 10:18:04.206 00:05:52.957 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 10:18:50.427 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2440 1 2025-11-09 10:18:57.201 00:05:07.087 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 10:19:57.241 00:05:06.946 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 10:24:56.875 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:24:56.853 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:24:56.933 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:24:56.719 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:24:56.640 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:24:56.641 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:20:55.611 00:05:01.553 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 10:20:55.671 00:05:01.493 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 10:20:57.164 00:05:07.146 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 10:21:54.447 00:05:02.716 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 10:22:55.650 00:05:01.593 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 10:23:55.590 00:05:01.593 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 10:24:10.432 00:05:10.631 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2752 1 2025-11-09 10:24:04.206 00:05:52.957 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 10:24:57.203 00:05:07.085 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 10:29:56.855 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:29:57.012 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:29:56.979 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:29:57.130 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:29:56.768 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:29:56.774 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:25:57.243 00:05:06.947 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 10:26:55.611 00:05:01.555 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 10:26:55.671 00:05:01.495 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 10:26:57.163 00:05:07.146 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 10:27:54.447 00:05:02.719 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 10:28:55.651 00:05:01.595 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 10:29:30.440 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2980 1 2025-11-09 10:29:55.592 00:05:01.595 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 10:34:56.835 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:34:57.317 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:34:57.047 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:34:56.926 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:34:57.106 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:34:56.847 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:30:04.209 00:05:52.957 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 10:30:57.204 00:05:07.086 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 10:31:57.246 00:05:06.953 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 10:32:55.611 00:05:01.555 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 10:32:55.671 00:05:01.495 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 10:32:57.166 00:05:07.144 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 10:33:54.449 00:05:02.743 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 10:34:50.446 00:05:00.748 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2808 1 2025-11-09 10:34:55.652 00:05:01.595 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 10:39:57.349 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:35:55.591 00:05:01.598 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 10:39:57.531 00:00:00.026 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:39:57.547 00:00:00.033 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:39:57.398 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:39:57.322 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:39:57.318 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:36:04.219 00:05:52.948 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 10:36:57.207 00:05:07.085 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 10:37:57.247 00:05:06.958 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 10:38:55.616 00:05:01.554 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 10:38:55.675 00:05:01.495 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 10:38:57.192 00:05:07.120 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 10:39:54.451 00:05:02.718 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 10:40:00.475 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2560 1 2025-11-09 10:44:57.261 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:44:57.374 00:00:00.026 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:44:57.292 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:40:55.652 00:05:01.597 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 10:44:57.490 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:44:57.543 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:44:57.453 00:00:00.026 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:41:55.595 00:05:01.596 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 10:42:04.221 00:05:52.950 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 10:42:57.208 00:05:07.086 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 10:43:57.249 00:05:06.955 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 10:44:55.617 00:05:01.555 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 10:44:55.677 00:05:01.495 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 10:44:57.170 00:05:07.146 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 10:45:20.481 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2440 1 2025-11-09 10:49:57.412 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:49:57.535 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:49:57.490 00:00:00.030 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:49:57.362 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:49:57.326 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:49:57.283 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:45:54.453 00:05:02.720 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 10:46:55.657 00:05:01.595 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 10:47:55.596 00:05:01.596 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 10:48:04.223 00:05:52.950 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 10:48:57.212 00:05:07.085 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 10:49:57.251 00:05:06.958 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 10:50:40.485 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2564 1 2025-11-09 10:54:57.328 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 10:54:57.272 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 10:50:55.616 00:05:01.556 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 10:50:55.677 00:05:01.495 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 10:54:57.361 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:54:57.539 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:54:57.488 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:54:57.352 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 10:50:57.171 00:05:07.144 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 10:51:54.457 00:05:02.715 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 10:52:55.658 00:05:01.595 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 10:53:55.599 00:05:01.594 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 Summary: total flows: 173, total bytes: 114052, total packets: 1709, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-11-09 09:54:04 - 2025-11-09 10:58:57 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0045s User: 0.0018s Wall: 0.0024s flows/second: 71964.2 Runtime: 0.0024s