Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-15 11:57:57.728 00:01:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 11:58:57.748 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 11:55:56.955 00:05:00.881 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-07-15 11:59:57.728 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 11:59:57.749 00:01:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:01:57.750 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:00:57.728 00:01:00.169 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:02:57.748 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:03:32.372 00:00:00.020 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:03:32.010 00:00:00.026 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:03:32.125 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 11:59:39.448 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 37 2544 1 2025-07-15 12:02:57.729 00:01:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:03:57.748 00:00:00.089 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 11:59:57.836 00:05:00.413 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-07-15 11:59:56.936 00:05:00.921 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-07-15 12:04:57.729 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:04:57.749 00:01:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:01:56.957 00:05:00.880 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-07-15 12:06:57.750 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:05:57.729 00:01:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:07:57.750 00:00:00.087 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:08:32.301 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:08:32.033 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:08:32.238 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:08:57.750 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:07:57.731 00:01:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:04:59.456 00:05:10.016 OSPF 28.0.7.1:0 -> 224.0.0.5:0 36 2544 1 2025-07-15 12:05:57.836 00:05:00.415 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-07-15 12:09:57.730 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:05:56.938 00:05:00.920 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-07-15 12:09:57.751 00:01:00.087 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:10:57.730 00:00:00.167 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:11:57.750 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:11:57.730 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:07:56.960 00:05:00.879 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-07-15 12:12:57.750 00:00:00.087 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:13:32.302 00:00:00.024 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:13:32.202 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:13:32.352 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:12:57.732 00:01:00.167 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:13:57.751 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:10:19.467 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2452 1 2025-07-15 12:14:57.731 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:14:57.751 00:01:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:15:57.731 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:11:56.939 00:05:00.919 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-07-15 12:11:57.838 00:05:00.415 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-07-15 12:16:57.732 00:00:00.167 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:16:57.751 00:01:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:13:56.960 00:05:00.879 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-07-15 12:18:33.690 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:18:33.601 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:18:33.550 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:17:57.731 00:01:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:18:57.752 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:15:39.472 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 2776 1 2025-07-15 12:19:57.731 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:19:57.752 00:01:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:20:57.731 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:21:57.734 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:17:56.940 00:05:00.919 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-07-15 12:17:57.840 00:05:00.416 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-07-15 12:21:57.755 00:01:00.086 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:23:32.530 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:23:32.375 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:23:32.385 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:22:57.732 00:01:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:23:57.753 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:19:56.962 00:05:00.878 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-07-15 12:24:57.753 00:00:00.089 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:24:57.732 00:00:00.169 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:20:59.479 00:05:02.813 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 3024 1 2025-07-15 12:25:57.753 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:25:57.733 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:26:57.734 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:23:56.944 00:05:00.920 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-07-15 12:26:57.754 00:01:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:23:57.841 00:05:00.419 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-07-15 12:28:32.729 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:28:32.470 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:28:32.570 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:27:57.734 00:01:00.169 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:28:57.754 00:00:00.090 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:29:57.754 00:00:00.089 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:25:56.965 00:05:00.880 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-07-15 12:26:09.489 00:05:10.016 OSPF 28.0.7.1:0 -> 224.0.0.5:0 37 2676 1 2025-07-15 12:30:57.756 00:00:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:29:57.735 00:01:00.170 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:31:57.735 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:31:57.755 00:01:00.090 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:33:32.466 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:33:32.571 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:33:32.654 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:33:57.755 00:00:00.092 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:29:57.843 00:05:00.416 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-07-15 12:32:57.736 00:01:00.172 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:29:56.945 00:05:00.923 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-07-15 12:34:57.755 00:00:00.092 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:31:29.504 00:05:10.009 OSPF 28.0.7.1:0 -> 224.0.0.5:0 36 2480 1 2025-07-15 12:35:57.755 00:00:00.093 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:34:57.736 00:01:00.173 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:31:56.965 00:05:00.884 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-07-15 12:36:57.735 00:00:00.182 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:36:57.756 00:01:00.093 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:38:32.744 00:00:00.022 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:38:32.654 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:38:32.669 00:00:00.028 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:38:57.756 00:00:00.092 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:37:57.736 00:01:00.173 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:39:57.757 00:00:00.092 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:35:56.946 00:05:00.923 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-07-15 12:35:57.848 00:05:00.414 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-07-15 12:40:57.757 00:00:00.092 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:39:57.737 00:01:00.172 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:36:49.513 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2516 1 2025-07-15 12:41:57.736 00:00:00.173 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:37:56.970 00:05:00.878 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-07-15 12:41:57.757 00:01:00.092 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:42:57.738 00:00:00.171 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:43:32.811 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:43:32.776 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:43:32.785 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:43:57.758 00:00:00.093 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:43:57.738 00:00:00.173 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:44:57.758 00:00:00.092 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:44:57.739 00:01:00.172 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:45:57.763 00:00:00.087 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:41:57.849 00:05:00.413 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-07-15 12:41:56.948 00:05:00.922 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-07-15 12:42:09.521 00:05:10.015 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2732 1 2025-07-15 12:46:57.743 00:00:00.167 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:47:57.743 00:00:00.168 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:46:57.762 00:01:00.088 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:43:56.968 00:05:00.884 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-07-15 12:48:32.950 00:00:00.021 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:48:33.010 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:48:33.020 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:48:57.743 00:00:00.170 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:48:57.762 00:01:00.089 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:50:57.763 00:00:00.091 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:49:57.743 00:01:00.172 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:47:29.538 00:05:10.007 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2748 1 2025-07-15 12:47:57.850 00:05:00.427 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-07-15 12:51:57.744 00:00:00.170 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:47:56.949 00:05:00.925 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-07-15 12:52:57.750 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:51:57.764 00:01:00.090 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:53:33.414 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:53:33.418 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:53:33.272 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:53:57.758 00:00:00.156 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:49:56.969 00:05:00.885 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-07-15 12:53:57.779 00:01:00.075 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-07-15 12:55:57.770 00:00:00.085 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:54:57.750 00:01:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-07-15 12:56:57.749 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:56:57.770 00:00:00.085 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:52:49.547 00:05:10.015 OSPF 28.0.7.1:0 -> 224.0.0.5:0 41 3052 1 2025-07-15 12:57:57.770 00:00:00.085 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-07-15 12:57:57.749 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-07-15 12:53:56.951 00:05:00.924 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-07-15 12:53:57.854 00:05:00.423 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-07-15 12:58:32.968 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:58:33.127 00:00:00.023 ICMP 32.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 12:58:33.048 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 Summary: total flows: 166, total bytes: 75639, total packets: 1124, avg bps: 160, avg pps: 0, avg bpp: 67 Time window: 2025-07-15 11:55:56 - 2025-07-15 12:58:58 Total flows processed: 166, passed: 166, Blocks skipped: 0, Bytes read: 17328 Sys: 0.0034s User: 0.0014s Wall: 0.0030s flows/second: 55297.8 Runtime: 0.0030s