Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 01:54:09.891 00:05:52.527 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:00:04.371 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:00:04.569 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:00:04.655 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:00:04.494 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:00:04.358 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:00:04.414 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 01:57:00.734 00:05:01.685 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 01:57:00.685 00:05:01.734 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 01:58:00.582 00:05:01.837 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 01:57:09.874 00:05:52.587 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 01:58:02.418 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 01:59:00.665 00:05:01.834 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 01:59:51.894 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2724 1 2025-11-20 02:00:00.716 00:05:01.726 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 01:59:09.823 00:05:52.679 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:00:09.894 00:05:52.527 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:05:04.428 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:05:04.424 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:05:04.318 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:05:04.637 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:05:04.631 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:05:04.503 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:03:00.739 00:05:01.682 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:03:00.685 00:05:01.736 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:03:09.875 00:05:52.587 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:04:00.585 00:05:01.837 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:04:02.420 00:05:07.426 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:05:00.665 00:05:01.837 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:05:11.899 00:05:10.267 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2832 1 2025-11-20 02:10:04.609 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:10:04.297 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:06:00.722 00:05:01.720 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:05:09.823 00:05:52.679 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:10:04.378 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:10:04.819 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:10:04.505 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:10:04.378 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:06:09.897 00:05:52.526 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:09:00.741 00:05:01.682 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:09:00.688 00:05:01.735 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:09:09.877 00:05:52.586 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:10:00.585 00:05:01.837 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:10:02.422 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:10:31.912 00:05:10.381 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-20 02:15:04.464 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:15:04.594 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:11:00.670 00:05:01.832 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:15:04.638 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:15:04.675 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:15:04.669 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:15:04.674 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:12:00.720 00:05:01.723 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:11:09.826 00:05:52.677 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:12:09.898 00:05:52.525 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:15:00.693 00:05:01.732 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:15:00.742 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:16:00.603 00:05:01.821 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:15:51.915 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2928 1 2025-11-20 02:15:09.878 00:05:52.586 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:20:04.729 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:20:04.818 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:20:04.694 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:20:04.702 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:20:04.519 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:20:04.614 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:16:02.423 00:05:07.429 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:17:00.672 00:05:01.833 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:18:00.725 00:05:01.722 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:17:09.830 00:05:52.677 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:18:09.898 00:05:52.528 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:25:05.269 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:25:05.475 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:25:05.469 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:25:05.344 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:21:00.744 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:21:00.693 00:05:01.734 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:25:05.265 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:25:05.264 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:21:11.919 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-20 02:22:00.607 00:05:01.820 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:21:09.878 00:05:52.589 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:22:02.424 00:05:07.427 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:23:00.674 00:05:01.834 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:24:00.725 00:05:01.723 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:23:09.831 00:05:52.684 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:24:09.900 00:05:52.530 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:30:04.948 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:30:04.935 00:00:00.028 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:30:05.072 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:30:04.794 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:30:04.723 00:00:00.027 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:30:04.713 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:26:31.925 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2668 1 2025-11-20 02:27:00.747 00:05:01.684 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:27:00.696 00:05:01.735 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:27:09.881 00:05:52.590 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:28:00.610 00:05:01.821 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:28:02.429 00:05:07.427 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:29:00.675 00:05:01.836 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:30:00.726 00:05:01.725 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:29:09.833 00:05:52.678 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:30:09.900 00:05:52.530 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:35:04.974 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:35:04.920 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:35:05.129 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:35:05.005 00:00:00.019 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:35:04.945 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:35:05.186 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:31:51.929 00:05:10.646 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 2944 1 2025-11-20 02:33:00.748 00:05:01.684 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:33:00.697 00:05:01.735 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:33:09.883 00:05:52.590 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:34:00.619 00:05:01.813 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:34:02.430 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:35:00.678 00:05:01.834 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:36:00.728 00:05:01.724 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:35:09.835 00:05:52.677 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:40:04.973 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:40:05.078 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:40:05.104 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:40:05.198 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:40:04.893 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:40:04.893 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:36:09.904 00:05:52.527 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:37:11.937 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-20 02:39:00.749 00:05:01.682 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:39:00.697 00:05:01.734 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:39:09.885 00:05:52.588 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:40:00.621 00:05:01.811 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:40:02.432 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:41:00.678 00:05:01.834 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:45:05.115 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:45:05.233 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:45:05.204 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:45:05.326 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:45:05.108 00:00:00.026 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:45:05.314 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:42:00.730 00:05:01.723 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:41:09.836 00:05:52.677 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:42:31.943 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2868 1 2025-11-20 02:42:09.905 00:05:52.528 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:45:00.751 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:45:00.699 00:05:01.735 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:46:00.621 00:05:01.813 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:45:09.885 00:05:52.590 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:50:05.302 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:50:05.426 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:50:05.299 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:50:05.283 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:50:05.216 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:50:05.203 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:46:02.432 00:05:07.430 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:47:00.680 00:05:01.834 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:48:00.732 00:05:01.722 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:47:09.840 00:05:52.675 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 02:47:51.947 00:05:10.049 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2544 1 2025-11-20 02:48:09.906 00:05:52.529 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 02:51:00.755 00:05:01.683 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 02:51:00.702 00:05:01.736 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 02:55:05.569 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 02:55:05.569 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 02:55:05.518 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:55:05.779 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:55:05.563 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:55:05.649 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 02:52:00.638 00:05:01.798 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 02:51:09.888 00:05:52.590 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 02:52:02.435 00:05:07.428 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 02:53:00.682 00:05:01.836 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 02:53:11.952 00:05:00.892 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2868 1 2025-11-20 02:54:00.733 00:05:01.723 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 02:53:09.841 00:05:52.676 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 114392, total packets: 1713, avg bps: 235, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 01:54:09 - 2025-11-20 02:59:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0050s User: 0.0017s Wall: 0.0026s flows/second: 66103.2 Runtime: 0.0026s