Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 03:54:09.932 00:05:52.537 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:00:06.779 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:00:06.736 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:00:06.862 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:00:06.989 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:00:06.939 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:00:06.817 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 03:57:00.776 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 03:57:00.717 00:05:01.754 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 03:56:52.067 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 2912 1 2025-11-20 03:58:00.665 00:05:01.805 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 03:57:09.912 00:05:52.600 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 03:58:02.463 00:05:07.424 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 03:59:00.697 00:05:01.854 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:00:00.758 00:05:01.733 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 03:59:09.866 00:05:52.686 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:00:09.931 00:05:52.542 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:05:06.947 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:05:06.985 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:05:06.773 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:05:07.159 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:05:07.061 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:05:07.067 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:02:12.072 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-20 04:03:00.778 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:03:00.720 00:05:01.752 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:03:09.913 00:05:52.601 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:04:00.668 00:05:01.806 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:04:02.471 00:05:07.417 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:05:00.701 00:05:01.854 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:06:00.759 00:05:01.735 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:05:09.867 00:05:52.687 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:10:07.109 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:10:07.158 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:10:07.193 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:10:07.324 00:00:00.018 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:10:07.365 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:10:07.238 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:06:09.934 00:05:52.540 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:07:32.079 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-20 04:09:00.779 00:05:01.696 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:09:00.721 00:05:01.754 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:10:00.667 00:05:01.808 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:09:09.914 00:05:52.602 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:10:02.474 00:05:07.418 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:11:00.702 00:05:01.855 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:15:07.118 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:15:07.201 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:15:07.252 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:15:07.328 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:15:07.208 00:00:00.037 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:15:07.281 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:12:00.761 00:05:01.735 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:11:09.868 00:05:52.688 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:12:52.085 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2684 1 2025-11-20 04:12:09.935 00:05:52.541 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:15:00.780 00:05:01.697 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:15:00.721 00:05:01.756 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:15:09.914 00:05:52.603 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:16:00.669 00:05:01.808 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:20:07.085 00:00:00.032 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:20:07.215 00:00:00.034 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:20:07.311 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:20:07.093 00:00:00.045 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:20:07.004 00:00:00.034 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:20:07.012 00:00:00.044 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:16:02.475 00:05:07.414 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:17:00.701 00:05:01.856 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:18:00.762 00:05:01.735 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:17:09.868 00:05:52.689 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:18:12.090 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2708 1 2025-11-20 04:18:09.935 00:05:52.544 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:25:07.359 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:25:07.474 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:25:07.331 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:25:07.287 00:00:00.032 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:21:00.783 00:05:01.696 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:21:00.724 00:05:01.755 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:25:07.265 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:25:07.208 00:00:00.032 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:21:09.916 00:05:52.603 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:22:00.684 00:05:01.795 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:22:02.479 00:05:07.415 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:23:00.706 00:05:01.852 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:23:32.091 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2948 1 2025-11-20 04:24:00.763 00:05:01.736 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:23:09.872 00:05:52.687 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:24:09.937 00:05:52.543 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:30:07.395 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:30:07.563 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:30:07.433 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:30:07.304 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:30:07.353 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:30:07.224 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:27:00.784 00:05:01.696 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:27:00.727 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:27:09.916 00:05:52.604 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:28:00.687 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:28:02.478 00:05:07.415 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:29:00.707 00:05:01.853 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:28:52.099 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2688 1 2025-11-20 04:30:00.765 00:05:01.736 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:29:09.873 00:05:52.688 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:35:07.452 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:35:07.683 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:35:07.806 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:35:07.805 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:30:09.936 00:05:52.544 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:35:07.595 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:35:07.371 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:33:00.786 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:33:00.728 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:33:09.917 00:05:52.604 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:34:00.691 00:05:01.791 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:34:02.480 00:05:07.416 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:34:12.104 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-20 04:35:00.711 00:05:01.853 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:40:07.493 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:40:07.546 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:36:00.765 00:05:01.738 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:35:09.874 00:05:52.689 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:40:07.578 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:40:07.703 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:40:07.522 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:40:07.627 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:36:09.939 00:05:52.546 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:39:00.785 00:05:01.698 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:39:00.730 00:05:01.753 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:39:32.114 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 2992 1 2025-11-20 04:39:09.918 00:05:52.606 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:40:00.695 00:05:01.790 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:40:02.483 00:05:07.415 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:41:00.712 00:05:01.853 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:45:07.544 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:45:07.702 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:45:07.628 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:45:07.756 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:45:07.665 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:45:07.784 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:42:00.767 00:05:01.737 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:41:09.876 00:05:52.692 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:42:09.939 00:05:52.546 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:44:52.119 00:05:10.012 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-20 04:45:00.787 00:05:01.699 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:45:00.736 00:05:01.750 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:46:00.693 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:50:07.776 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:50:07.680 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:45:09.929 00:05:52.597 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:50:07.671 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:50:07.987 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:50:07.983 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:50:07.761 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:46:02.484 00:05:07.418 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:47:00.717 00:05:01.850 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:48:00.768 00:05:01.738 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:47:09.879 00:05:52.687 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 04:48:09.940 00:05:52.546 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 04:50:12.131 00:05:10.016 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2668 1 2025-11-20 04:55:07.748 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:55:07.972 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:55:08.030 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:55:07.993 00:00:00.015 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 04:51:00.789 00:05:01.700 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 04:51:00.738 00:05:01.751 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 04:55:07.762 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 04:55:07.905 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 04:51:09.920 00:05:52.609 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 04:52:00.696 00:05:01.794 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 04:52:02.487 00:05:07.417 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 04:53:00.717 00:05:01.853 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 04:54:00.768 00:05:01.743 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 04:53:09.882 00:05:52.689 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 114200, total packets: 1712, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 03:54:09 - 2025-11-20 04:59:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0038s User: 0.0019s Wall: 0.0024s flows/second: 73398.2 Runtime: 0.0024s