Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 13:54:04.288 00:05:52.964 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 13:54:57.292 00:05:07.086 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 14:00:01.177 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:00:01.543 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:00:01.297 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:00:01.027 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:00:01.332 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:00:00.946 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 13:55:57.332 00:05:06.939 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 13:56:55.679 00:05:01.574 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 13:56:55.750 00:05:01.503 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 13:56:57.253 00:05:07.148 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 13:57:10.760 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2508 1 2025-11-09 13:57:54.514 00:05:02.741 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 13:58:55.730 00:05:01.605 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 13:59:55.659 00:05:01.616 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 14:00:04.290 00:05:52.965 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 14:05:01.392 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:05:01.333 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:05:01.655 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:05:01.471 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:05:01.121 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:05:01.390 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:00:57.293 00:05:07.090 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 14:01:57.333 00:05:06.940 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 14:02:30.763 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2624 1 2025-11-09 14:02:55.684 00:05:01.572 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 14:02:55.756 00:05:01.500 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 14:02:57.254 00:05:07.149 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 14:03:54.514 00:05:02.747 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 14:04:55.734 00:05:01.608 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 14:10:01.249 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:10:01.425 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:05:55.663 00:05:01.619 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 14:10:01.511 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:10:01.459 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:10:01.455 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:10:01.505 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:06:04.293 00:05:52.970 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 14:06:57.295 00:05:07.089 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 14:07:50.767 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2520 1 2025-11-09 14:07:57.334 00:05:06.942 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 14:08:55.686 00:05:01.577 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 14:08:55.756 00:05:01.507 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 14:08:57.262 00:05:07.143 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 14:09:54.515 00:05:02.747 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 14:10:55.735 00:05:01.608 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 14:15:01.470 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:15:01.408 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:15:01.488 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:15:01.639 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:15:01.680 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:15:01.678 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:11:55.667 00:05:01.616 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 14:12:04.295 00:05:52.968 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 14:12:57.302 00:05:07.083 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 14:13:10.769 00:05:00.671 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2748 1 2025-11-09 14:13:57.342 00:05:06.936 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 14:14:55.688 00:05:01.576 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 14:14:55.757 00:05:01.507 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 14:14:57.262 00:05:07.144 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 14:15:54.517 00:05:02.747 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 14:20:01.474 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:20:01.374 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:20:01.620 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:20:01.684 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:20:01.581 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:20:01.454 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:16:55.736 00:05:01.609 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 14:17:55.670 00:05:01.615 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 14:18:20.774 00:05:10.735 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2948 1 2025-11-09 14:18:04.298 00:05:52.968 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 14:18:57.303 00:05:07.083 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 14:19:57.345 00:05:06.935 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 14:20:55.691 00:05:01.574 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 14:20:55.758 00:05:01.507 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 14:25:01.629 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:25:01.753 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:25:01.552 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:25:01.699 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:25:01.543 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:25:01.619 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:20:57.264 00:05:07.142 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 14:21:54.519 00:05:02.747 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 14:22:55.738 00:05:01.607 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 14:23:40.780 00:05:10.785 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2940 1 2025-11-09 14:23:55.672 00:05:01.615 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 14:24:04.299 00:05:52.966 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 14:24:57.305 00:05:07.083 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 14:30:01.681 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:30:01.683 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:30:01.707 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:30:01.891 00:00:00.027 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:30:01.889 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:30:01.763 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:25:57.345 00:05:06.936 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 14:26:55.693 00:05:01.574 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 14:26:55.761 00:05:01.506 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 14:26:57.266 00:05:07.144 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 14:27:54.519 00:05:02.747 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 14:28:55.740 00:05:01.606 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 14:29:00.794 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2560 1 2025-11-09 14:29:55.675 00:05:01.611 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 14:30:04.300 00:05:52.966 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 14:35:01.730 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:35:01.728 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:35:01.980 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:35:01.939 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:35:01.992 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:35:01.808 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:30:57.307 00:05:07.083 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 14:31:57.346 00:05:06.936 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 14:32:55.696 00:05:01.571 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 14:32:55.761 00:05:01.506 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 14:32:57.267 00:05:07.143 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 14:33:54.522 00:05:02.747 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 14:34:20.801 00:05:10.904 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2440 1 2025-11-09 14:34:55.742 00:05:01.607 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 14:35:55.676 00:05:01.612 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 14:40:01.955 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:40:02.079 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:40:01.881 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:40:02.006 00:00:00.020 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:40:01.867 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:40:01.921 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:36:04.303 00:05:52.966 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 14:36:57.307 00:05:07.085 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 14:37:57.347 00:05:06.938 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 14:38:55.697 00:05:01.572 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 14:38:55.763 00:05:01.507 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 14:38:57.270 00:05:07.143 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 14:39:40.807 00:05:00.969 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2540 1 2025-11-09 14:39:54.525 00:05:02.745 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 14:40:55.742 00:05:01.608 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 14:45:02.153 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:45:02.101 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:45:02.363 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:45:02.190 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:45:02.180 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:45:02.187 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:41:55.677 00:05:01.613 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 14:42:04.304 00:05:52.965 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 14:42:57.310 00:05:07.084 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 14:43:57.351 00:05:06.939 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 14:44:55.765 00:05:01.506 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 14:44:55.699 00:05:01.572 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 14:44:50.813 00:05:10.016 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 2992 1 2025-11-09 14:44:57.271 00:05:07.143 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 14:45:54.523 00:05:02.748 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 14:50:02.149 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:50:02.144 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:50:02.358 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:50:02.226 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:50:02.230 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:50:02.361 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:46:55.744 00:05:01.607 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 14:47:55.680 00:05:01.614 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-09 14:48:04.306 00:05:52.967 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-09 14:48:57.310 00:05:07.086 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-09 14:49:57.351 00:05:06.968 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-09 14:50:10.816 00:05:10.011 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 3056 1 2025-11-09 14:55:02.225 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:55:02.419 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:55:02.255 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:55:02.224 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-09 14:50:55.701 00:05:01.572 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-09 14:50:55.765 00:05:01.509 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-09 14:55:02.210 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-09 14:55:02.144 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 14:50:57.270 00:05:07.146 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-09 14:51:54.523 00:05:02.749 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-09 14:52:55.746 00:05:01.608 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-09 14:53:55.681 00:05:01.613 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 Summary: total flows: 173, total bytes: 114440, total packets: 1714, avg bps: 235, avg pps: 0, avg bpp: 66 Time window: 2025-11-09 13:54:04 - 2025-11-09 14:58:57 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0032s User: 0.0021s Wall: 0.0022s flows/second: 77722.2 Runtime: 0.0022s