Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 14:55:12.607 00:05:52.747 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 14:55:12.569 00:05:52.826 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 14:57:03.779 00:05:01.575 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 14:57:03.741 00:05:01.613 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 14:57:03.759 00:05:01.616 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 14:57:42.984 00:05:00.024 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2780 1 2025-11-25 14:58:03.619 00:05:01.736 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 14:58:05.434 00:05:07.153 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:02:45.994 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:02:45.981 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:02:46.349 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:02:46.204 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:02:46.564 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:02:46.061 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:59:03.723 00:05:01.714 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 14:59:12.590 00:05:52.766 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 15:01:12.571 00:05:52.825 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 15:01:12.607 00:05:52.749 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 15:02:52.987 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-25 15:03:03.762 00:05:01.614 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 15:03:03.782 00:05:01.574 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 15:03:03.742 00:05:01.614 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 15:07:46.559 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:07:46.403 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:07:46.149 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:07:46.143 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:07:46.348 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:07:46.068 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:04:03.622 00:05:01.735 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 15:04:05.437 00:05:07.152 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:05:03.722 00:05:01.714 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 15:05:12.593 00:05:52.765 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 15:07:12.571 00:05:52.826 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 15:07:12.608 00:05:52.749 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 15:08:12.991 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2704 1 2025-11-25 15:12:46.319 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:12:46.320 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:12:46.400 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:12:46.408 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:12:46.530 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:12:46.471 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:09:03.783 00:05:01.576 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 15:09:03.743 00:05:01.616 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 15:09:03.763 00:05:01.617 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 15:10:03.622 00:05:01.737 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 15:10:05.438 00:05:07.152 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:11:03.725 00:05:01.715 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 15:11:12.592 00:05:52.769 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 15:13:32.995 00:05:00.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2700 1 2025-11-25 15:17:46.604 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:17:46.590 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:17:46.482 00:00:00.035 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:17:46.675 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:17:46.465 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:17:46.510 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:13:12.609 00:05:52.751 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 15:13:12.572 00:05:52.828 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 15:15:03.783 00:05:01.577 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 15:15:03.746 00:05:01.614 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 15:15:03.763 00:05:01.617 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 15:16:03.628 00:05:01.732 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 15:16:05.440 00:05:07.150 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:17:03.727 00:05:01.714 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 15:17:12.593 00:05:52.768 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 15:22:46.467 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:22:46.464 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:22:46.485 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:22:46.677 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:22:46.722 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:22:46.544 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:18:43.005 00:05:10.013 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2708 1 2025-11-25 15:19:12.574 00:05:52.827 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 15:19:12.609 00:05:52.752 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 15:21:03.766 00:05:01.615 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 15:21:03.786 00:05:01.574 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 15:21:03.746 00:05:01.614 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 15:22:03.629 00:05:01.732 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 15:22:05.440 00:05:07.151 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:23:03.727 00:05:01.715 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 15:27:46.614 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:27:46.811 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:27:46.806 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:27:46.685 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:27:46.601 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:27:46.606 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:23:12.594 00:05:52.767 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 15:24:03.018 00:05:10.092 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2728 1 2025-11-25 15:25:12.575 00:05:52.827 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 15:25:12.611 00:05:52.751 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 15:27:03.786 00:05:01.575 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 15:27:03.748 00:05:01.613 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 15:27:03.767 00:05:01.615 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 15:28:03.630 00:05:01.732 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 15:28:05.442 00:05:07.154 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:32:46.875 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:32:46.812 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:32:46.812 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:32:46.559 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:32:46.601 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:32:46.478 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:29:03.729 00:05:01.713 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 15:29:23.056 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2624 1 2025-11-25 15:29:12.595 00:05:52.767 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 15:31:12.615 00:05:52.747 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 15:31:12.577 00:05:52.827 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 15:33:03.789 00:05:01.574 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 15:33:03.750 00:05:01.613 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 15:33:03.768 00:05:01.615 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 15:37:47.011 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:37:47.136 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:37:47.078 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:37:47.069 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:37:46.926 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:37:46.989 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:34:03.631 00:05:01.731 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 15:34:05.442 00:05:07.154 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:34:43.061 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2728 1 2025-11-25 15:35:03.731 00:05:01.712 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 15:35:12.597 00:05:52.767 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 15:37:12.577 00:05:52.826 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 15:37:12.617 00:05:52.747 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 15:42:46.875 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:42:47.002 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:42:47.105 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:42:46.978 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:42:46.791 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:42:46.898 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:39:03.770 00:05:01.615 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 15:39:03.790 00:05:01.575 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 15:39:03.750 00:05:01.615 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 15:40:03.632 00:05:01.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 15:40:05.444 00:05:07.156 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:40:03.072 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2772 1 2025-11-25 15:41:03.731 00:05:01.714 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 15:41:12.600 00:05:52.765 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 15:47:46.997 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:47:47.291 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:47:47.118 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:47:47.156 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:47:47.076 00:00:00.025 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:47:47.076 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:43:12.620 00:05:52.746 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 15:43:12.584 00:05:52.823 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 15:45:03.772 00:05:01.613 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 15:45:03.792 00:05:01.573 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 15:45:03.751 00:05:01.614 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 15:45:23.079 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2932 1 2025-11-25 15:46:03.636 00:05:01.732 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 15:46:05.446 00:05:07.155 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:47:03.732 00:05:01.716 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 15:47:12.603 00:05:52.765 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-11-25 15:52:46.906 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:52:46.987 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:52:47.206 00:00:00.045 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:52:47.070 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:52:47.076 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:52:47.119 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:49:12.585 00:05:52.824 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-11-25 15:49:12.620 00:05:52.748 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-11-25 15:50:43.087 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2504 1 2025-11-25 15:51:03.773 00:05:01.615 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-11-25 15:51:03.793 00:05:01.575 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-11-25 15:51:03.752 00:05:01.616 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-11-25 15:52:03.636 00:05:01.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-11-25 15:52:05.447 00:05:07.153 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-11-25 15:53:03.731 00:05:01.718 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-11-25 15:57:47.252 00:00:00.028 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-11-25 15:57:47.187 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 15:57:47.279 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:57:47.463 00:00:00.028 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:57:47.203 00:00:00.044 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:57:47.268 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 15:53:12.605 00:05:52.764 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 Summary: total flows: 173, total bytes: 114208, total packets: 1712, avg bps: 238, avg pps: 0, avg bpp: 66 Time window: 2025-11-25 14:55:12 - 2025-11-25 15:59:05 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0051s User: 0.0017s Wall: 0.0031s flows/second: 55859.5 Runtime: 0.0031s