Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 23:56:09.890 00:05:07.291 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-04 23:57:08.189 00:05:01.643 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-04 23:57:08.209 00:05:01.602 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-04 23:57:07.979 00:05:01.833 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-04 23:57:09.811 00:05:07.399 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-04 23:58:07.950 00:05:01.863 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 00:02:16.792 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:02:16.712 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:58:09.810 00:05:07.391 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 00:02:16.802 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:02:17.004 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:02:17.004 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:02:16.793 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 23:59:07.959 00:05:01.934 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-04 23:59:09.850 00:05:07.339 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-04 23:59:31.723 00:05:10.011 OSPF 27.0.10.1:0 -> 224.0.0.5:0 43 3016 1 2025-12-05 00:02:09.891 00:05:07.321 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 00:03:08.211 00:05:01.602 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 00:03:07.980 00:05:01.834 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 00:03:08.191 00:05:01.642 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 00:07:17.004 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:07:17.077 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:07:17.122 00:00:00.038 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:07:16.944 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:07:16.868 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:07:16.865 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:03:09.813 00:05:07.398 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 00:04:07.951 00:05:01.862 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 00:04:09.812 00:05:07.420 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 00:04:51.734 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 3076 1 2025-12-05 00:05:07.959 00:05:01.935 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 00:05:09.852 00:05:07.338 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 00:12:17.133 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:12:17.008 00:00:00.039 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:12:17.089 00:00:00.039 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:12:17.221 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:12:17.344 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:12:17.339 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:08:09.894 00:05:07.323 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 00:09:08.212 00:05:01.604 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 00:09:07.981 00:05:01.835 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 00:09:08.191 00:05:01.644 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 00:09:09.814 00:05:07.397 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 00:10:07.953 00:05:01.863 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 00:10:09.815 00:05:07.421 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 00:10:11.741 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2684 1 2025-12-05 00:11:07.962 00:05:01.935 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 00:11:09.855 00:05:07.336 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 00:17:17.279 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:17:17.369 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:17:17.454 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:17:17.440 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:17:17.243 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:17:17.198 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:14:09.897 00:05:07.321 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 00:15:08.193 00:05:01.643 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 00:15:08.215 00:05:01.603 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 00:15:07.985 00:05:01.833 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 00:15:09.817 00:05:07.396 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 00:15:31.745 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2704 1 2025-12-05 00:16:07.953 00:05:01.864 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 00:16:09.816 00:05:07.420 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 00:17:07.964 00:05:01.934 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 00:17:09.857 00:05:07.337 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 00:22:17.461 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:22:17.450 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:22:17.309 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:22:17.183 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:22:17.241 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:22:17.104 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:20:09.898 00:05:07.322 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 00:20:51.750 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 32 2176 1 2025-12-05 00:21:08.195 00:05:01.646 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 00:21:08.215 00:05:01.605 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 00:21:07.984 00:05:01.836 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 00:21:09.817 00:05:07.396 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 00:22:07.955 00:05:01.867 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 00:22:09.818 00:05:07.420 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 00:23:07.971 00:05:01.931 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 00:27:17.406 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:27:17.428 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:27:17.645 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:23:09.861 00:05:07.335 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 00:27:17.520 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:27:17.217 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:27:17.440 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:26:09.903 00:05:07.316 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 00:26:11.758 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 43 3036 1 2025-12-05 00:27:08.217 00:05:01.606 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 00:27:07.991 00:05:01.832 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 00:27:08.198 00:05:01.646 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 00:27:09.821 00:05:07.400 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 00:32:17.454 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:32:17.778 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:32:17.841 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:32:17.536 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:28:07.955 00:05:01.868 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 00:32:17.567 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:32:17.455 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:28:09.821 00:05:07.417 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 00:29:07.971 00:05:01.932 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 00:29:09.862 00:05:07.340 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 00:31:31.760 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2916 1 2025-12-05 00:32:09.903 00:05:07.318 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 00:33:08.219 00:05:01.605 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 00:33:07.993 00:05:01.831 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 00:33:08.199 00:05:01.645 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 00:37:17.614 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:37:17.616 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:33:09.823 00:05:07.399 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 00:37:17.537 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:37:17.825 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:37:17.755 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:37:17.697 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:34:07.957 00:05:01.868 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 00:34:09.824 00:05:07.418 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 00:35:07.973 00:05:01.931 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 00:35:09.870 00:05:07.333 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 00:36:51.765 00:05:10.010 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2660 1 2025-12-05 00:42:17.839 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:42:17.531 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:42:17.710 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:42:18.051 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:42:17.805 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:38:09.906 00:05:07.317 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 00:42:17.613 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:39:08.200 00:05:01.645 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 00:39:08.220 00:05:01.605 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 00:39:08.014 00:05:01.811 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 00:39:09.824 00:05:07.403 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 00:40:07.957 00:05:01.868 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 00:40:09.825 00:05:07.417 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 00:41:07.994 00:05:01.913 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 00:41:09.865 00:05:07.345 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 00:42:11.775 00:05:10.150 OSPF 27.0.10.1:0 -> 224.0.0.5:0 40 2888 1 2025-12-05 00:47:17.720 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:47:17.829 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:47:17.869 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:47:17.931 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:47:17.991 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:47:17.911 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:44:09.905 00:05:07.321 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 00:45:08.200 00:05:01.647 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 00:45:08.222 00:05:01.606 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 00:45:08.016 00:05:01.812 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 00:45:09.826 00:05:07.408 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 00:46:07.961 00:05:01.866 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 00:46:09.827 00:05:07.421 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 00:47:07.995 00:05:01.913 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 00:47:09.866 00:05:07.349 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 00:47:31.780 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 33 2240 1 2025-12-05 00:52:18.471 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:52:18.414 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:52:18.346 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:52:18.287 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:52:18.260 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:52:18.266 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:50:09.907 00:05:07.322 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 00:51:08.202 00:05:01.648 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 00:51:08.222 00:05:01.608 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 00:51:08.019 00:05:01.811 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 00:51:09.828 00:05:07.409 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 00:52:07.962 00:05:01.867 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 00:52:09.829 00:05:07.422 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 00:52:51.785 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-05 00:53:07.999 00:05:00.003 TCP 27.158.0.1:40177 -> 27.156.0.1:179 11 686 1 2025-12-05 00:57:17.721 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 00:57:17.724 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 00:57:17.827 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:57:17.933 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:57:18.021 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 00:53:09.869 00:05:07.348 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 00:57:17.805 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 Summary: total flows: 173, total bytes: 114228, total packets: 1712, avg bps: 245, avg pps: 0, avg bpp: 66 Time window: 2025-12-04 23:56:09 - 2025-12-05 00:58:17 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0023s User: 0.0034s Wall: 0.0036s flows/second: 48731.7 Runtime: 0.0036s