Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 11:58:54.169 00:00:00.046 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 11:58:52.537 00:01:00.041 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 11:55:52.475 00:05:50.881 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 11:56:40.468 00:05:10.004 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 2832 1 2025-10-17 12:00:52.537 00:00:00.041 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 11:56:52.495 00:05:50.835 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 11:59:52.477 00:02:00.219 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-10-17 11:59:52.477 00:02:00.122 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-10-17 12:01:52.538 00:01:00.041 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 12:02:52.478 00:01:00.218 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:02:52.478 00:01:00.121 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:03:54.223 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:03:52.537 00:01:00.042 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 12:05:52.538 00:00:00.041 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 12:02:00.473 00:05:10.002 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2688 1 2025-10-17 12:01:52.477 00:05:50.877 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 12:04:52.478 00:02:00.219 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-10-17 12:04:52.478 00:02:00.122 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-10-17 12:02:52.498 00:05:50.836 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 12:06:52.539 00:01:00.041 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 12:07:52.481 00:01:00.216 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:07:52.481 00:01:00.120 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:08:54.279 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:08:52.580 00:01:00.003 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 12:10:52.542 00:00:00.041 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 12:09:52.483 00:01:00.217 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:09:52.483 00:01:00.121 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:07:20.475 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2828 1 2025-10-17 12:11:52.483 00:00:00.217 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 12:11:52.483 00:00:00.118 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 12:07:52.480 00:05:50.876 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 12:11:52.543 00:01:00.038 TCP 28.156.0.1:37457 -> 28.155.0.1:179 3 194 1 2025-10-17 12:08:52.498 00:05:50.839 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 12:12:52.483 00:01:00.217 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:12:52.483 00:01:00.118 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:13:54.479 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:13:52.581 00:01:00.001 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:14:52.483 00:01:00.217 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:14:52.483 00:01:00.119 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:15:52.581 00:00:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 1 71 1 2025-10-17 12:12:40.480 00:05:10.007 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2676 1 2025-10-17 12:16:52.484 00:00:00.216 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 12:16:52.484 00:00:00.118 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 12:16:52.582 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:13:52.484 00:05:50.874 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 12:17:52.484 00:01:00.217 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:17:52.484 00:01:00.119 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:18:54.591 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:14:52.504 00:05:50.835 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 12:18:52.583 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:19:52.484 00:01:00.217 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:19:52.484 00:01:00.118 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:20:52.581 00:00:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 1 71 1 2025-10-17 12:18:00.488 00:05:10.003 OSPF 28.0.7.1:0 -> 224.0.0.5:0 37 2708 1 2025-10-17 12:21:52.582 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:21:52.484 00:02:00.221 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-10-17 12:21:52.484 00:02:00.119 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-10-17 12:23:54.856 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:19:52.485 00:05:50.875 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 12:23:52.582 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:20:52.504 00:05:50.834 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 12:24:52.484 00:01:00.221 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:24:52.484 00:01:00.118 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:25:52.583 00:00:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 1 71 1 2025-10-17 12:23:20.490 00:05:10.007 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2384 1 2025-10-17 12:26:52.582 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:26:52.487 00:02:00.222 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-10-17 12:26:52.487 00:02:00.116 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-10-17 12:28:54.863 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:28:52.583 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:25:52.489 00:05:50.872 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 12:29:52.486 00:01:00.222 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:29:52.486 00:01:00.117 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:26:52.507 00:05:50.833 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 12:28:40.499 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 41 2992 1 2025-10-17 12:30:52.583 00:02:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 3 213 1 2025-10-17 12:31:52.489 00:02:00.223 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-10-17 12:31:52.489 00:02:00.116 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-10-17 12:33:55.280 00:00:00.024 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:33:52.584 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:34:52.488 00:01:00.223 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:34:52.488 00:01:00.117 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:31:52.487 00:05:50.875 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 12:35:52.584 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:32:52.508 00:05:50.834 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 12:37:52.584 00:00:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 1 71 1 2025-10-17 12:36:52.489 00:01:00.221 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:36:52.489 00:01:00.115 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:34:00.505 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 36 2500 1 2025-10-17 12:38:52.490 00:00:00.221 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 12:38:52.490 00:00:00.115 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 12:38:54.974 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:38:52.585 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:39:52.489 00:01:00.222 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:39:52.489 00:01:00.118 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:40:52.588 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:37:52.490 00:05:50.873 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 12:41:52.490 00:01:00.118 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:41:52.490 00:01:00.222 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:42:52.588 00:00:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 1 71 1 2025-10-17 12:39:20.512 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 42 3088 1 2025-10-17 12:38:52.510 00:05:50.833 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 12:43:52.490 00:00:00.221 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 12:43:52.490 00:00:00.126 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 12:43:55.147 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:43:52.591 00:00:59.998 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:44:52.493 00:01:00.220 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:44:52.493 00:01:00.118 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:45:52.591 00:00:59.999 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:47:52.589 00:00:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 1 71 1 2025-10-17 12:46:52.493 00:01:00.226 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:46:52.493 00:01:00.117 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:43:52.491 00:05:50.876 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 12:48:52.493 00:00:00.221 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 12:48:52.493 00:00:00.117 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 12:44:40.519 00:05:10.005 OSPF 28.0.7.1:0 -> 224.0.0.5:0 36 2580 1 2025-10-17 12:48:55.354 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:44:52.512 00:05:50.835 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 12:48:52.590 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:49:52.493 00:01:00.220 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:49:52.493 00:01:00.117 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:50:52.591 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:52:52.590 00:00:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 1 71 1 2025-10-17 12:51:52.494 00:01:00.220 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:51:52.494 00:01:00.117 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:53:52.498 00:00:00.217 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 12:53:52.498 00:00:00.113 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 12:53:55.598 00:00:00.024 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 12:50:00.524 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2448 1 2025-10-17 12:49:52.493 00:05:50.877 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 12:53:52.590 00:01:00.001 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:50:52.514 00:05:50.838 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 12:54:52.498 00:01:00.217 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 12:54:52.498 00:01:00.113 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:55:52.591 00:01:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 142 1 2025-10-17 12:57:52.591 00:00:00.000 TCP 28.156.0.1:37457 -> 28.155.0.1:179 1 71 1 2025-10-17 12:56:52.499 00:01:00.113 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 12:56:52.499 00:01:00.216 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 Summary: total flows: 138, total bytes: 67010, total packets: 1003, avg bps: 144, avg pps: 0, avg bpp: 66 Time window: 2025-10-17 11:55:52 - 2025-10-17 12:57:52 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0011s User: 0.0023s Wall: 0.0017s flows/second: 79902.5 Runtime: 0.0017s