Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 01:56:09.922 00:05:07.322 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 01:56:41.851 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 3060 1 2025-12-05 01:57:08.222 00:05:01.641 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 01:57:08.243 00:05:01.600 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 01:57:08.032 00:05:01.811 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 01:57:09.841 00:05:07.411 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 01:58:07.985 00:05:01.858 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 01:58:09.842 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:02:19.344 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:02:19.288 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:02:19.424 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:02:19.554 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:02:19.381 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:02:19.368 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 01:58:09.921 00:05:58.093 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 01:59:09.883 00:05:07.352 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:02:01.858 00:05:10.012 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2660 1 2025-12-05 02:02:09.922 00:05:07.322 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:03:08.223 00:05:01.640 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:03:08.243 00:05:01.600 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:03:08.032 00:05:01.811 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:03:09.843 00:05:07.412 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:07:19.411 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:07:19.480 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:07:19.393 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:07:19.621 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:07:19.615 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:07:19.560 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:04:07.986 00:05:01.857 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:04:09.843 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:04:09.923 00:05:58.095 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:05:09.882 00:05:07.353 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:07:21.870 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2808 1 2025-12-05 02:08:09.924 00:05:07.321 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:12:19.358 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:12:19.737 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:12:19.574 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:12:19.354 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:12:19.527 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:12:19.275 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:09:08.247 00:05:01.598 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:09:08.036 00:05:01.809 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:09:08.227 00:05:01.638 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:09:09.845 00:05:07.412 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:10:07.988 00:05:01.858 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:10:09.845 00:05:07.422 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:10:09.925 00:05:58.093 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:11:09.885 00:05:07.351 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:12:41.879 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-05 02:17:19.834 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:17:19.842 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:17:19.913 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:17:20.045 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:17:20.029 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:17:19.922 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:14:09.925 00:05:07.322 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:15:08.231 00:05:01.634 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:15:08.252 00:05:01.594 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:15:08.038 00:05:01.808 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:15:09.844 00:05:07.412 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:16:07.998 00:05:00.006 TCP 27.156.0.1:179 -> 27.151.0.1:36165 11 667 1 2025-12-05 02:16:09.845 00:05:07.424 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:16:09.925 00:05:58.095 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:17:09.886 00:05:07.353 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:18:01.886 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-05 02:22:20.605 00:00:00.034 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:22:20.811 00:00:00.032 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:22:20.786 00:00:00.026 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:22:20.698 00:00:00.026 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:22:20.618 00:00:00.026 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:22:20.600 00:00:00.032 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:20:09.927 00:05:07.326 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:21:08.253 00:05:01.593 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:21:08.038 00:05:01.808 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:21:08.232 00:05:01.633 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:21:09.846 00:05:07.413 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:21:09.845 00:05:58.158 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:22:09.845 00:05:07.427 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:22:09.926 00:05:58.095 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:23:09.887 00:05:07.353 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:27:19.672 00:00:00.025 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:27:19.887 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:27:20.036 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:27:19.754 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:27:19.678 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:27:19.675 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:23:21.894 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 43 3016 1 2025-12-05 02:26:09.926 00:05:07.328 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:27:08.254 00:05:01.593 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:27:08.040 00:05:01.807 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:27:08.235 00:05:01.633 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:27:09.846 00:05:07.414 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:27:09.846 00:05:58.158 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:28:09.846 00:05:07.428 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:32:19.799 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:32:19.742 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:32:19.884 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:32:20.011 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:32:20.007 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:32:19.822 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:28:41.902 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 3052 1 2025-12-05 02:28:09.926 00:05:58.098 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:29:09.887 00:05:07.355 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:32:09.927 00:05:07.328 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:33:08.235 00:05:01.633 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:33:08.255 00:05:01.592 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:33:08.043 00:05:01.804 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:33:09.847 00:05:07.415 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:37:19.765 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:37:19.886 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:37:19.686 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:37:19.975 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:37:20.091 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:37:19.965 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:33:09.847 00:05:58.158 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:34:01.911 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 36 2644 1 2025-12-05 02:34:09.847 00:05:07.429 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:34:09.928 00:05:58.096 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:35:09.888 00:05:07.354 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:38:09.928 00:05:07.328 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:42:19.991 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:42:20.212 00:00:00.046 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:42:20.208 00:00:00.043 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:42:20.175 00:00:00.020 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:42:20.003 00:00:00.045 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:42:20.092 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:39:08.256 00:05:01.593 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:39:08.044 00:05:01.805 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:39:08.236 00:05:01.634 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:39:09.847 00:05:07.419 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:39:21.916 00:05:10.008 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2624 1 2025-12-05 02:39:09.847 00:05:58.158 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:40:09.849 00:05:07.429 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:40:09.929 00:05:58.097 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:41:09.889 00:05:07.357 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:47:20.219 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:47:20.342 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:47:20.221 00:00:00.041 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:47:20.138 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:47:20.131 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:47:20.058 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:44:09.931 00:05:07.327 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:44:41.924 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 32 2176 1 2025-12-05 02:45:08.264 00:05:01.588 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:45:08.045 00:05:01.807 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:45:08.244 00:05:01.628 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:45:09.850 00:05:07.418 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:45:09.850 00:05:58.157 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:46:09.851 00:05:07.427 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:46:09.930 00:05:58.097 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:47:09.890 00:05:07.358 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:52:20.224 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:52:20.411 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:52:20.340 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:52:20.281 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:52:20.202 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:52:20.202 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:50:01.928 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 42 2992 1 2025-12-05 02:50:09.933 00:05:07.325 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 02:51:08.247 00:05:01.628 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 02:51:08.268 00:05:01.587 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 02:51:08.046 00:05:01.809 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 02:51:09.852 00:05:07.417 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 02:51:09.853 00:05:58.156 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 02:52:09.853 00:05:07.426 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 02:52:09.933 00:05:58.094 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 02:53:09.893 00:05:07.357 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 02:57:20.449 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 02:57:20.551 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 02:57:20.632 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:57:20.295 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:57:20.660 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 02:57:20.598 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 Summary: total flows: 173, total bytes: 114165, total packets: 1711, avg bps: 245, avg pps: 0, avg bpp: 66 Time window: 2025-12-05 01:56:09 - 2025-12-05 02:58:17 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0042s User: 0.0011s Wall: 0.0023s flows/second: 76485.1 Runtime: 0.0023s