Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 19:59:27.820 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 19:59:41.405 00:00:00.024 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:00:27.822 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 19:59:27.638 00:01:00.123 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 19:56:27.752 00:05:00.255 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-09-07 20:01:27.632 00:00:00.130 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:01:27.822 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:02:27.631 00:00:00.130 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:02:27.823 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:03:27.828 00:00:00.158 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:03:27.631 00:00:00.134 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 19:59:24.485 00:05:03.277 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-07 19:59:24.465 00:05:03.317 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-07 20:00:00.994 00:05:00.013 OSPF 28.0.7.1:0 -> 224.0.0.5:0 41 2932 1 2025-09-07 20:04:27.822 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:04:41.517 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:04:27.632 00:01:00.130 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:05:27.823 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:06:27.634 00:00:00.131 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:06:27.824 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:02:27.761 00:05:00.247 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-09-07 20:07:27.824 00:00:00.163 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:07:27.632 00:00:00.132 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:08:27.846 00:00:00.142 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:08:27.634 00:00:00.130 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:05:11.006 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 37 2668 1 2025-09-07 20:05:24.466 00:05:03.318 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-07 20:05:24.486 00:05:03.278 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-07 20:09:41.684 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:09:27.635 00:01:00.129 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:09:27.824 00:01:00.163 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-07 20:11:27.825 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:12:27.826 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:11:27.634 00:01:00.130 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:08:27.764 00:05:00.247 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-09-07 20:13:27.637 00:00:00.130 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:13:27.832 00:00:00.158 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:10:31.015 00:05:10.037 OSPF 28.0.7.1:0 -> 224.0.0.5:0 37 2608 1 2025-09-07 20:14:41.845 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:14:27.634 00:01:00.131 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:11:24.488 00:05:03.278 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-07 20:14:27.826 00:01:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-07 20:11:24.468 00:05:03.328 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-07 20:16:27.836 00:00:00.155 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:16:27.637 00:01:00.129 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:17:27.827 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:18:27.827 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:18:27.636 00:00:00.130 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:14:27.765 00:05:00.255 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-09-07 20:19:41.924 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:15:51.051 00:05:10.030 OSPF 28.0.7.1:0 -> 224.0.0.5:0 42 3120 1 2025-09-07 20:19:27.638 00:01:00.129 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:19:27.827 00:01:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-07 20:21:27.827 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:17:24.469 00:05:03.317 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-07 20:17:24.489 00:05:03.277 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-07 20:22:27.828 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:21:27.639 00:01:00.128 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:23:27.827 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:23:27.637 00:00:00.129 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:20:27.767 00:05:00.246 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-09-07 20:24:41.851 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:24:27.638 00:01:00.129 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:21:11.060 00:05:10.007 OSPF 28.0.7.1:0 -> 224.0.0.5:0 36 2464 1 2025-09-07 20:24:27.838 00:01:00.153 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-07 20:26:27.827 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:26:27.639 00:01:00.128 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:23:24.491 00:05:03.277 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-07 20:27:27.828 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:23:24.471 00:05:03.317 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-07 20:28:27.640 00:00:00.128 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:28:27.828 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:29:42.056 00:00:00.020 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:29:27.640 00:01:00.127 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:29:27.828 00:01:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-07 20:26:27.767 00:05:00.247 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-09-07 20:26:31.068 00:05:10.845 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2812 1 2025-09-07 20:31:27.829 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:31:27.648 00:01:00.120 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:32:27.830 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:33:27.641 00:00:00.129 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:29:24.491 00:05:03.277 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-07 20:33:27.830 00:00:00.163 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:29:24.471 00:05:03.317 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-07 20:34:27.642 00:00:00.126 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:34:27.829 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:34:41.986 00:00:00.024 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:35:27.837 00:00:00.157 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:35:27.641 00:00:00.135 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:31:51.073 00:05:10.003 OSPF 28.0.7.1:0 -> 224.0.0.5:0 36 2588 1 2025-09-07 20:36:27.829 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:32:27.767 00:05:00.248 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-09-07 20:37:27.829 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:36:27.642 00:01:00.127 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:38:27.642 00:00:00.128 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:38:27.830 00:00:00.166 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:39:27.642 00:00:00.127 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:39:27.830 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:35:24.471 00:05:03.318 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-07 20:35:24.492 00:05:03.278 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-07 20:39:42.252 00:00:00.020 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:40:27.642 00:00:00.128 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:40:27.830 00:00:00.166 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:37:11.077 00:05:10.005 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2768 1 2025-09-07 20:41:27.829 00:01:00.166 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-07 20:41:27.642 00:01:00.128 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:38:27.769 00:05:00.256 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-09-07 20:43:27.830 00:00:00.166 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:43:27.642 00:01:00.129 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:44:27.831 00:00:00.165 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:44:42.399 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:45:27.643 00:00:00.127 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:45:27.833 00:00:00.164 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:41:24.491 00:05:03.279 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-07 20:41:24.474 00:05:03.318 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-07 20:42:31.082 00:05:10.010 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 2908 1 2025-09-07 20:46:27.643 00:01:00.127 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:46:27.831 00:01:00.166 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-07 20:48:27.832 00:00:00.166 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-07 20:44:27.771 00:05:00.253 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-09-07 20:48:27.645 00:01:00.128 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:49:42.746 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:50:27.645 00:00:00.127 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:47:24.495 00:05:03.278 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-07 20:47:24.475 00:05:03.319 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-07 20:47:51.093 00:05:10.169 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2740 1 2025-09-07 20:51:27.645 00:01:00.127 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:49:27.832 00:05:00.199 TCP 28.156.0.1:37457 -> 28.155.0.1:179 12 738 1 2025-09-07 20:53:27.645 00:01:00.128 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:50:27.771 00:05:00.253 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-09-07 20:54:42.353 00:00:00.024 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-07 20:55:27.646 00:00:00.127 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-07 20:53:11.100 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 34 2360 1 2025-09-07 20:56:27.646 00:01:00.127 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-07 20:53:24.495 00:05:03.279 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-07 20:53:24.475 00:05:03.319 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 Summary: total flows: 136, total bytes: 69277, total packets: 1046, avg bps: 148, avg pps: 0, avg bpp: 66 Time window: 2025-09-07 19:56:27 - 2025-09-07 20:58:27 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0027s User: 0.0018s Wall: 0.0020s flows/second: 67626.0 Runtime: 0.0020s