Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 21:59:06.426 00:00:00.025 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 21:58:52.657 00:01:00.233 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 21:58:52.657 00:01:00.163 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 21:55:52.656 00:05:50.974 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 21:59:52.717 00:01:00.084 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 21:56:52.677 00:05:50.935 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 22:00:52.658 00:01:00.233 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:00:52.658 00:01:00.167 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:01:52.718 00:00:00.087 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 21:57:51.178 00:05:10.022 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 2832 1 2025-10-17 22:02:52.659 00:00:00.232 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:02:52.659 00:00:00.166 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:02:52.719 00:01:00.086 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:04:06.262 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:03:52.660 00:01:00.230 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:03:52.660 00:01:00.164 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:04:52.721 00:01:00.084 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:06:52.721 00:00:00.085 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:01:52.659 00:05:50.973 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 22:05:52.662 00:01:00.231 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:05:52.662 00:01:00.165 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:03:11.202 00:05:10.009 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2768 1 2025-10-17 22:02:52.680 00:05:50.931 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 22:07:52.661 00:00:00.164 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:07:52.661 00:00:00.231 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:07:52.720 00:01:00.085 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:09:06.417 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:08:52.661 00:01:00.231 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:08:52.661 00:01:00.165 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:09:52.721 00:01:00.085 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:10:52.661 00:01:00.239 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:10:52.661 00:01:00.165 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:11:52.722 00:00:00.085 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:08:31.210 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 2944 1 2025-10-17 22:07:52.661 00:05:50.971 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 22:12:52.662 00:00:00.239 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:12:52.662 00:00:00.166 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:12:52.722 00:00:00.085 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:08:52.681 00:05:50.931 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 22:13:52.663 00:00:00.238 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:13:52.663 00:00:00.166 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:13:52.724 00:00:00.085 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:14:06.763 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:14:52.663 00:00:00.238 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:14:52.663 00:00:00.165 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:14:52.722 00:01:00.086 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:16:52.724 00:00:00.085 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:15:52.663 00:01:00.240 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:15:52.663 00:01:00.165 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:17:52.665 00:00:00.237 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:17:52.665 00:00:00.164 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:17:52.725 00:00:00.084 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:13:51.216 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2432 1 2025-10-17 22:13:52.661 00:05:50.972 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 22:18:52.663 00:00:00.238 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:18:52.663 00:00:00.165 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:18:52.723 00:00:00.085 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:19:06.647 00:00:00.018 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:14:52.683 00:05:50.930 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 22:19:52.666 00:00:00.236 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:19:52.666 00:00:00.163 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:19:52.726 00:01:00.083 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:20:52.666 00:01:00.237 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:20:52.666 00:01:00.165 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:21:52.726 00:00:00.084 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:22:52.665 00:00:00.237 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:22:52.665 00:00:00.165 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:22:52.726 00:00:00.084 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:19:11.224 00:05:10.011 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2772 1 2025-10-17 22:23:52.666 00:00:00.236 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:23:52.666 00:00:00.164 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:23:52.726 00:00:00.085 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:24:06.772 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:19:52.665 00:05:50.973 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 22:24:52.666 00:00:00.237 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:24:52.666 00:00:00.165 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:20:52.686 00:05:50.933 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 22:24:52.726 00:01:00.086 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:26:52.727 00:00:00.086 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:25:52.666 00:01:00.238 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:25:52.666 00:01:00.166 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:27:52.728 00:00:00.085 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:24:31.235 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 37 2584 1 2025-10-17 22:27:52.668 00:01:00.242 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:27:52.668 00:01:00.165 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:28:52.728 00:00:00.084 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:29:06.989 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:29:52.668 00:00:00.243 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:29:52.668 00:00:00.164 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:25:52.665 00:05:50.975 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 22:29:52.730 00:01:00.084 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:26:52.686 00:05:50.934 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 22:30:52.669 00:01:00.164 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:30:52.669 00:01:00.243 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:31:52.729 00:01:00.083 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:33:52.730 00:00:00.083 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:32:52.670 00:01:00.241 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:32:52.670 00:01:00.162 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:29:51.242 00:05:10.010 OSPF 28.0.7.1:0 -> 224.0.0.5:0 42 3000 1 2025-10-17 22:34:07.106 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:34:52.671 00:00:00.241 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:34:52.671 00:00:00.163 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:34:52.731 00:01:00.082 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:31:52.669 00:05:50.971 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 22:35:52.670 00:01:00.243 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:35:52.670 00:01:00.163 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:32:52.690 00:05:50.931 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 22:36:52.731 00:01:00.083 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:38:52.731 00:00:00.083 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:37:52.672 00:01:00.164 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:37:52.672 00:01:00.244 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:39:07.320 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:35:11.254 00:05:10.007 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2812 1 2025-10-17 22:39:52.733 00:00:00.082 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:39:52.674 00:00:00.242 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:39:52.674 00:00:00.161 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:40:52.733 00:00:00.081 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:40:52.673 00:01:00.243 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:40:52.673 00:01:00.162 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:37:52.671 00:05:50.980 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 22:41:52.735 00:01:00.080 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:38:52.691 00:05:50.937 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 22:42:52.673 00:01:00.242 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:42:52.673 00:01:00.162 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:43:52.734 00:00:00.082 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:44:07.227 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:40:31.260 00:05:10.007 OSPF 28.0.7.1:0 -> 224.0.0.5:0 36 2564 1 2025-10-17 22:44:52.733 00:00:00.082 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:44:52.673 00:00:00.243 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:44:52.673 00:00:00.163 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:45:52.733 00:00:00.082 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:45:52.674 00:00:00.242 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:45:52.674 00:00:00.162 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:46:52.673 00:00:00.242 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:46:52.673 00:00:00.162 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:46:52.734 00:01:00.081 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:43:52.673 00:05:50.976 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 22:47:52.677 00:01:00.159 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:47:52.676 00:01:00.241 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:48:52.736 00:00:00.080 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:49:08.280 00:00:00.017 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:44:52.693 00:05:50.936 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 22:49:52.678 00:00:00.240 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:49:52.678 00:00:00.158 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:49:52.738 00:00:00.078 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:45:51.268 00:05:10.009 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2788 1 2025-10-17 22:50:52.739 00:00:00.078 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:50:52.679 00:00:00.239 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:50:52.679 00:00:00.157 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:51:52.678 00:00:00.239 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:51:52.678 00:00:00.158 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:51:52.738 00:01:00.078 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:52:52.679 00:01:00.239 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:52:52.679 00:01:00.158 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:53:52.740 00:00:00.078 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:54:07.313 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-17 22:49:52.678 00:05:50.971 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-17 22:54:52.740 00:00:00.077 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:54:52.679 00:00:00.240 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:54:52.679 00:00:00.158 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:51:11.276 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 33 2240 1 2025-10-17 22:50:52.699 00:05:50.931 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-17 22:55:52.680 00:00:00.239 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:55:52.680 00:00:00.158 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:55:52.741 00:00:00.078 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-17 22:56:52.679 00:00:00.239 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-17 22:56:52.679 00:00:00.158 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-17 22:56:52.741 00:01:00.078 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-17 22:57:52.679 00:01:00.239 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-17 22:57:52.679 00:01:00.158 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-17 22:58:52.741 00:00:00.078 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 Summary: total flows: 171, total bytes: 69906, total packets: 1057, avg bps: 147, avg pps: 0, avg bpp: 66 Time window: 2025-10-17 21:55:52 - 2025-10-17 22:58:52 Total flows processed: 171, passed: 171, Blocks skipped: 0, Bytes read: 17848 Sys: 0.0023s User: 0.0031s Wall: 0.0030s flows/second: 56474.5 Runtime: 0.0031s