Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 23:54:09.851 00:05:52.540 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:00:02.599 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:00:02.252 00:00:00.050 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:00:02.351 00:00:00.026 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:00:02.818 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:00:02.808 00:00:00.033 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:00:02.332 00:00:00.050 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-19 23:57:00.703 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-19 23:57:00.653 00:05:01.739 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-19 23:57:21.769 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2668 1 2025-11-19 23:57:09.832 00:05:52.601 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-19 23:58:00.501 00:05:01.893 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-19 23:58:02.391 00:05:07.419 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-19 23:59:00.632 00:05:01.840 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:00:00.684 00:05:01.729 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-19 23:59:09.790 00:05:52.687 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 00:05:01.836 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:05:01.935 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:05:02.208 00:00:00.042 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:05:02.207 00:00:00.032 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:05:01.997 00:00:00.042 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:05:01.755 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:00:09.853 00:05:52.539 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:02:41.771 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2668 1 2025-11-20 00:03:00.655 00:05:01.740 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 00:03:00.704 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 00:03:09.835 00:05:52.599 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 00:04:00.502 00:05:01.893 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 00:04:02.392 00:05:07.420 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 00:05:00.635 00:05:01.840 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:10:02.236 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:06:00.685 00:05:01.729 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 00:10:02.376 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:10:02.433 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:05:09.791 00:05:52.683 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 00:10:02.082 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:10:02.166 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:10:02.003 00:00:00.025 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:06:09.858 00:05:52.538 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:08:01.776 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2848 1 2025-11-20 00:09:00.706 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 00:09:00.656 00:05:01.740 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 00:10:00.512 00:05:01.883 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 00:09:09.839 00:05:52.598 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 00:10:02.395 00:05:07.418 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 00:15:02.234 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:15:02.303 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:15:02.271 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:11:00.636 00:05:01.841 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:15:02.445 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:15:02.510 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:15:02.384 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:12:00.686 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 00:11:09.791 00:05:52.685 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 00:12:09.859 00:05:52.538 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:13:21.781 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-20 00:15:00.707 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 00:15:00.657 00:05:01.739 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 00:20:02.410 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:20:02.540 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:15:09.843 00:05:52.594 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 00:20:02.278 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:20:02.352 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:20:02.198 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:20:02.196 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:16:00.508 00:05:01.888 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 00:16:02.396 00:05:07.418 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 00:17:00.637 00:05:01.840 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:18:00.687 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 00:17:09.792 00:05:52.685 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 00:18:41.786 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-20 00:18:09.862 00:05:52.535 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:25:02.413 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:25:02.418 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:21:00.708 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 00:21:00.659 00:05:01.739 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 00:25:02.642 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:25:02.624 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:25:02.720 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:25:02.498 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:21:09.845 00:05:52.593 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 00:22:00.510 00:05:01.887 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 00:22:02.397 00:05:07.420 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 00:23:00.641 00:05:01.837 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:24:00.688 00:05:01.731 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 00:23:09.796 00:05:52.683 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 00:24:01.788 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2792 1 2025-11-20 00:24:09.865 00:05:52.535 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:30:02.793 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:30:02.859 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:30:02.850 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:30:02.838 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:30:02.650 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:30:02.758 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:27:00.710 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 00:27:00.661 00:05:01.740 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 00:27:09.845 00:05:52.596 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 00:28:00.519 00:05:01.883 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 00:28:02.397 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 00:29:00.641 00:05:01.840 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:29:21.793 00:05:00.953 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2704 1 2025-11-20 00:30:00.691 00:05:01.731 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 00:29:09.799 00:05:52.683 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 00:35:03.180 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:35:02.575 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:35:02.720 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:35:02.884 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:35:02.365 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:35:02.805 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:30:09.865 00:05:52.536 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:33:00.662 00:05:01.739 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 00:33:00.710 00:05:01.691 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 00:33:09.848 00:05:52.594 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 00:34:00.522 00:05:01.880 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 00:34:02.401 00:05:07.420 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 00:34:31.800 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2868 1 2025-11-20 00:35:00.644 00:05:01.838 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:40:02.731 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:36:00.690 00:05:01.732 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 00:40:02.918 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:40:02.851 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:35:09.800 00:05:52.682 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 00:40:02.636 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:40:02.709 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:40:02.557 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:36:09.868 00:05:52.534 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:39:00.712 00:05:01.691 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 00:39:00.664 00:05:01.739 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 00:39:51.805 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2688 1 2025-11-20 00:39:09.849 00:05:52.593 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 00:40:00.524 00:05:01.880 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 00:40:02.402 00:05:07.421 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 00:45:02.868 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:41:00.644 00:05:01.839 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:45:03.057 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:45:03.054 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:45:02.801 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:45:02.846 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:45:02.719 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:42:00.692 00:05:01.731 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 00:41:09.803 00:05:52.681 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 00:42:09.871 00:05:52.532 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:45:00.713 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 00:45:00.668 00:05:01.735 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 00:45:11.815 00:05:10.002 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-20 00:50:02.954 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:50:02.738 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:46:00.526 00:05:01.877 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 00:50:02.992 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:50:03.165 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:50:03.129 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:45:09.852 00:05:52.592 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 00:50:02.819 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:46:02.403 00:05:07.421 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 00:47:00.648 00:05:01.836 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:48:00.693 00:05:01.732 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 00:47:09.805 00:05:52.680 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 00:48:09.874 00:05:52.530 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 00:50:31.817 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2928 1 2025-11-20 00:55:02.850 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 00:55:02.747 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:51:00.714 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 00:51:00.671 00:05:01.733 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 00:55:02.936 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:55:03.060 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:55:03.055 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:55:02.827 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 00:52:00.529 00:05:01.875 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 00:51:09.854 00:05:52.591 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 00:52:02.403 00:05:07.428 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 00:53:00.652 00:05:01.833 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 00:54:00.696 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 00:53:09.806 00:05:52.680 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 114320, total packets: 1713, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-11-19 23:54:09 - 2025-11-20 00:59:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0032s User: 0.0021s Wall: 0.0022s flows/second: 79869.5 Runtime: 0.0022s