Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 08:55:17.371 00:05:52.676 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 08:57:08.377 00:05:01.610 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 08:57:08.397 00:05:01.569 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 08:57:08.198 00:05:01.768 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 08:57:09.966 00:05:07.419 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 08:57:32.429 00:05:10.007 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-05 08:58:08.172 00:05:01.795 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 08:58:09.965 00:05:07.422 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 09:02:27.933 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:02:27.931 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:02:27.876 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:02:28.144 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:02:28.286 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:02:28.012 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 08:58:17.363 00:05:52.645 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 08:59:08.179 00:05:01.869 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 09:01:17.367 00:05:52.681 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 09:02:52.438 00:05:10.430 OSPF 27.0.10.1:0 -> 224.0.0.5:0 45 3160 1 2025-12-05 09:03:08.400 00:05:01.567 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 09:03:08.199 00:05:01.768 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 09:03:08.380 00:05:01.608 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 09:03:09.967 00:05:07.421 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 09:07:27.887 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:07:28.135 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:07:28.082 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:07:27.960 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:07:27.925 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:07:27.880 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:04:08.173 00:05:01.795 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 09:04:09.967 00:05:07.422 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 09:04:17.366 00:05:52.643 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 09:05:08.181 00:05:01.868 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 09:07:17.368 00:05:52.682 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 09:08:12.445 00:05:10.017 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2908 1 2025-12-05 09:12:27.904 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:12:28.050 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:12:27.861 00:00:00.020 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:12:27.975 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:12:27.695 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:12:27.781 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:09:08.399 00:05:01.571 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 09:09:08.202 00:05:01.768 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 09:09:08.378 00:05:01.611 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 09:09:09.969 00:05:07.422 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 09:10:08.173 00:05:01.798 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 09:10:09.968 00:05:07.422 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 09:10:17.371 00:05:52.643 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 09:11:08.184 00:05:01.869 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 09:17:28.087 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:17:28.084 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:17:28.040 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:17:28.297 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:17:28.095 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:17:28.164 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:13:32.461 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 35 2524 1 2025-12-05 09:13:17.371 00:05:52.682 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 09:15:08.400 00:05:01.572 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 09:15:08.202 00:05:01.770 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 09:15:08.380 00:05:01.612 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 09:15:09.972 00:05:07.420 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 09:16:08.175 00:05:01.797 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 09:16:09.971 00:05:07.421 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 09:17:08.184 00:05:01.870 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 09:16:17.372 00:05:52.642 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 09:22:28.945 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:22:28.864 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:22:29.080 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:22:29.292 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:22:29.337 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:22:29.081 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:18:52.466 00:05:10.003 OSPF 27.0.10.1:0 -> 224.0.0.5:0 39 2808 1 2025-12-05 09:19:17.372 00:05:52.683 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 09:21:08.381 00:05:01.613 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 09:21:08.402 00:05:01.572 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 09:21:08.205 00:05:01.769 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 09:21:09.972 00:05:07.420 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 09:22:08.180 00:05:01.795 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 09:22:09.973 00:05:07.421 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 09:23:08.185 00:05:01.869 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 09:22:17.372 00:05:52.643 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 09:27:28.164 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:27:28.055 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:27:28.137 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:27:28.149 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:27:28.376 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:27:28.332 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:24:12.469 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 32 2176 1 2025-12-05 09:25:17.372 00:05:52.683 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 09:27:08.404 00:05:01.572 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 09:27:08.208 00:05:01.768 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 09:27:08.382 00:05:01.613 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 09:27:09.973 00:05:07.420 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 09:28:08.178 00:05:01.796 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 09:28:09.974 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 09:32:28.079 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:32:28.079 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:32:28.471 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:32:28.291 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:32:28.281 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:32:28.160 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:29:08.187 00:05:01.868 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 09:28:17.373 00:05:52.643 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 09:29:32.473 00:05:10.006 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 2872 1 2025-12-05 09:31:17.376 00:05:52.681 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 09:33:08.411 00:05:01.565 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 09:33:08.219 00:05:01.757 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 09:33:08.391 00:05:01.605 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 09:33:09.974 00:05:07.420 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 09:37:28.420 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:37:28.550 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:37:28.622 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:37:28.417 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:37:28.340 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:37:28.337 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:34:08.183 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 09:34:09.975 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 09:34:52.479 00:05:10.009 OSPF 27.0.10.1:0 -> 224.0.0.5:0 41 3016 1 2025-12-05 09:34:17.374 00:05:52.643 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 09:35:08.200 00:05:01.857 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 09:37:17.379 00:05:52.682 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 09:42:28.801 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:42:28.679 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:42:28.803 00:00:00.024 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:42:28.759 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:42:28.840 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:42:29.013 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:39:08.396 00:05:01.602 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 09:39:08.416 00:05:01.562 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 09:39:08.220 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 09:39:09.976 00:05:07.420 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 09:40:08.183 00:05:01.796 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 09:40:09.975 00:05:07.425 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 09:40:12.488 00:05:10.004 OSPF 27.0.10.1:0 -> 224.0.0.5:0 38 2804 1 2025-12-05 09:41:08.201 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 09:40:17.376 00:05:52.645 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 09:47:28.720 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:47:28.683 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:47:28.689 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:47:28.477 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:47:28.472 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:47:28.396 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:43:17.381 00:05:52.679 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 09:45:08.398 00:05:01.602 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 09:45:08.418 00:05:01.561 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 09:45:08.221 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 09:45:09.979 00:05:07.418 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 09:45:32.493 00:05:10.005 OSPF 27.0.10.1:0 -> 224.0.0.5:0 37 2664 1 2025-12-05 09:46:08.183 00:05:01.796 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 09:46:09.979 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 09:47:08.201 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 09:46:17.382 00:05:52.638 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 09:52:28.622 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:52:28.728 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:52:28.811 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:52:28.832 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:52:28.830 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:52:28.809 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:49:17.381 00:05:52.679 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-12-05 09:50:52.497 00:05:10.011 OSPF 27.0.10.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-05 09:51:08.419 00:05:01.562 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-12-05 09:51:08.223 00:05:01.758 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-12-05 09:51:08.399 00:05:01.602 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-12-05 09:51:09.980 00:05:07.419 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-12-05 09:52:08.188 00:05:01.793 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-12-05 09:52:09.979 00:05:07.423 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-12-05 09:53:08.204 00:05:01.859 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-12-05 09:52:17.379 00:05:52.643 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-12-05 09:57:28.876 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:57:28.917 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:57:28.791 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-05 09:57:28.707 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-12-05 09:57:28.711 00:00:00.021 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 09:57:29.124 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 Summary: total flows: 173, total bytes: 114136, total packets: 1711, avg bps: 242, avg pps: 0, avg bpp: 66 Time window: 2025-12-05 08:55:17 - 2025-12-05 09:58:10 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0041s User: 0.0020s Wall: 0.0032s flows/second: 54487.8 Runtime: 0.0032s