Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 05:54:09.956 00:05:52.555 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:00:09.592 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:00:09.521 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:00:09.672 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:00:09.404 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:00:09.311 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:00:09.324 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 05:57:00.815 00:05:01.698 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 05:57:00.753 00:05:01.760 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 05:57:09.938 00:05:52.615 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 05:58:00.719 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 05:58:02.510 00:05:07.407 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 05:59:00.732 00:05:01.860 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 05:59:22.234 00:05:10.011 OSPF 27.0.10.1:0 -> 224.0.0.5:0 33 2256 1 2025-11-20 06:00:00.794 00:05:01.737 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 05:59:09.895 00:05:52.697 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:00:09.961 00:05:52.552 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:05:09.259 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:05:09.158 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:05:09.292 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:05:09.469 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:05:09.462 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:05:09.237 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:03:00.815 00:05:01.698 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:03:00.754 00:05:01.759 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:04:00.720 00:05:01.792 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:03:09.940 00:05:52.612 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:04:02.512 00:05:07.405 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:04:42.246 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 2992 1 2025-11-20 06:05:00.748 00:05:01.844 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:06:00.796 00:05:01.737 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:05:09.897 00:05:52.697 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:10:09.208 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:10:09.366 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:10:09.422 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:10:09.418 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:10:09.572 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:10:09.446 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:06:09.961 00:05:52.553 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:09:00.819 00:05:01.695 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:09:00.764 00:05:01.750 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:09:09.941 00:05:52.613 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:10:00.733 00:05:01.780 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:10:02.514 00:05:07.405 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:10:02.256 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2668 1 2025-11-20 06:11:00.742 00:05:01.860 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:15:09.425 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:15:09.362 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:15:09.548 00:00:00.031 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:15:09.634 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:15:09.555 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:15:09.441 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:12:00.795 00:05:01.738 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:11:09.897 00:05:52.696 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:12:09.961 00:05:52.555 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:15:00.817 00:05:01.697 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:15:00.763 00:05:01.751 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:15:22.268 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2668 1 2025-11-20 06:15:09.941 00:05:52.614 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:16:00.724 00:05:01.792 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:20:09.635 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:20:09.511 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:20:09.575 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:20:09.636 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:20:09.428 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:20:09.433 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:16:02.515 00:05:07.408 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:17:00.743 00:05:01.852 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:18:00.797 00:05:01.739 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:17:09.898 00:05:52.698 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:18:09.963 00:05:52.553 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:20:42.274 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2848 1 2025-11-20 06:21:00.819 00:05:01.699 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:21:00.776 00:05:01.742 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:25:09.761 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:25:09.833 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:25:09.916 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:25:09.972 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:25:10.199 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:25:09.913 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:21:09.945 00:05:52.612 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:22:00.725 00:05:01.792 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:22:02.515 00:05:07.409 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:23:00.755 00:05:01.842 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:24:00.800 00:05:01.737 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:23:09.902 00:05:52.695 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:24:09.965 00:05:52.551 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:30:09.763 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:30:09.889 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:30:09.881 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:26:02.285 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-20 06:30:09.851 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:30:09.678 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:30:09.770 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:27:00.777 00:05:01.741 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:27:00.823 00:05:01.695 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:28:00.727 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:27:09.946 00:05:52.614 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:28:02.517 00:05:07.407 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:29:00.756 00:05:01.844 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:30:00.802 00:05:01.738 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:29:09.903 00:05:52.697 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:30:09.967 00:05:52.554 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:35:09.834 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:35:09.765 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:35:10.046 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:35:10.042 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:35:09.847 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:35:09.975 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:31:22.292 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 2992 1 2025-11-20 06:33:00.823 00:05:01.702 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:33:00.777 00:05:01.748 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:34:00.727 00:05:01.794 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:33:09.948 00:05:52.614 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:34:02.520 00:05:07.406 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:35:00.758 00:05:01.844 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:36:00.803 00:05:01.739 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:35:09.904 00:05:52.698 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:40:10.053 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:40:10.175 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:40:10.172 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:40:10.045 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:40:09.964 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:40:09.965 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:36:42.303 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2400 1 2025-11-20 06:36:09.969 00:05:52.552 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:39:00.823 00:05:01.699 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:39:00.791 00:05:01.731 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:40:00.729 00:05:01.794 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:39:09.950 00:05:52.613 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:40:02.522 00:05:07.406 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:41:00.773 00:05:01.831 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:45:10.146 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:45:10.189 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:45:09.998 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:45:10.367 00:00:00.012 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:45:10.212 00:00:00.045 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:45:10.270 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:42:00.804 00:05:01.740 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:41:09.907 00:05:52.697 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:42:02.309 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2628 1 2025-11-20 06:42:09.970 00:05:52.553 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:45:00.825 00:05:01.699 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:45:00.802 00:05:01.722 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:45:09.950 00:05:52.614 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:46:00.730 00:05:01.795 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:50:10.082 00:00:00.039 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:50:10.340 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:50:10.206 00:00:00.048 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:50:10.077 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:50:10.130 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:50:09.997 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:46:02.523 00:05:07.409 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:47:00.782 00:05:01.823 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:47:22.317 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 3012 1 2025-11-20 06:48:00.805 00:05:01.740 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:47:09.912 00:05:52.693 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-20 06:48:09.970 00:05:52.554 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-20 06:51:00.826 00:05:01.699 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-20 06:51:00.802 00:05:01.723 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-20 06:55:10.296 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:55:10.494 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:55:10.417 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:55:10.212 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 06:55:10.284 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-20 06:55:10.131 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 06:51:09.952 00:05:52.620 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-20 06:52:00.731 00:05:01.802 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-20 06:52:02.526 00:05:07.409 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-20 06:52:42.323 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2688 1 2025-11-20 06:53:00.781 00:05:01.830 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-20 06:54:00.806 00:05:01.745 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-20 06:53:09.911 00:05:52.701 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 114260, total packets: 1713, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-11-20 05:54:09 - 2025-11-20 06:59:02 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0033s User: 0.0025s Wall: 0.0028s flows/second: 62161.8 Runtime: 0.0028s