Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 02:59:12.403 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 02:58:52.754 00:01:00.230 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-18 02:58:52.754 00:01:00.151 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 02:59:52.815 00:00:00.072 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 02:55:51.607 00:05:10.003 OSPF 28.0.7.1:0 -> 224.0.0.5:0 37 2596 1 2025-10-18 02:55:52.754 00:05:50.984 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-18 03:00:52.754 00:00:00.152 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:00:52.754 00:00:00.231 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:00:52.815 00:00:00.071 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:01:52.755 00:00:00.230 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:01:52.755 00:00:00.151 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 02:56:52.773 00:05:50.944 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-18 03:01:52.815 00:00:00.071 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:02:52.755 00:00:00.230 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:02:52.755 00:00:00.151 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:02:52.816 00:01:00.071 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:04:12.291 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:03:52.756 00:01:00.230 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-18 03:03:52.757 00:01:00.152 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:04:52.815 00:00:00.073 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:01:11.609 00:05:10.004 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2804 1 2025-10-18 03:05:52.817 00:00:00.072 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:05:52.757 00:00:00.231 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:05:52.757 00:00:00.152 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:06:52.816 00:00:00.072 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:01:52.755 00:05:50.984 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-18 03:06:52.757 00:00:00.230 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:06:52.757 00:00:00.152 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:02:52.775 00:05:50.943 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-18 03:07:52.759 00:00:00.229 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:07:52.759 00:00:00.150 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:07:52.819 00:01:00.071 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:09:12.563 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:09:52.820 00:00:00.070 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:08:52.759 00:01:00.228 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-18 03:08:52.759 00:01:00.151 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:06:31.614 00:05:10.004 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2448 1 2025-10-18 03:10:52.820 00:00:00.070 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:10:52.760 00:00:00.227 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:10:52.760 00:00:00.150 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:11:52.762 00:00:00.226 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:11:52.762 00:00:00.149 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:11:52.823 00:00:00.069 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:07:52.759 00:05:50.983 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-18 03:12:52.762 00:00:00.226 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:12:52.762 00:00:00.149 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:08:52.780 00:05:50.943 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-18 03:12:52.822 00:01:00.069 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:14:12.641 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:14:52.823 00:00:00.068 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:13:52.763 00:01:00.227 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-18 03:13:52.763 00:01:00.150 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:15:52.764 00:00:00.225 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:15:52.764 00:00:00.167 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:15:52.824 00:00:00.087 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:11:51.619 00:05:10.011 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2648 1 2025-10-18 03:16:52.824 00:00:00.087 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:16:52.764 00:00:00.225 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:16:52.764 00:00:00.168 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:17:52.764 00:00:00.226 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:17:52.764 00:00:00.167 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:13:52.762 00:05:50.982 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-18 03:17:52.824 00:01:00.087 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:19:12.750 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:14:52.784 00:05:50.940 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-18 03:19:52.827 00:00:00.089 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:18:52.764 00:01:00.226 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-18 03:18:52.764 00:01:00.172 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:20:52.827 00:00:00.090 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:20:52.766 00:00:00.225 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:20:52.766 00:00:00.170 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:17:09.953 00:05:01.681 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 2900 1 2025-10-18 03:21:52.767 00:00:00.224 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:21:52.767 00:00:00.169 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:21:52.827 00:00:00.089 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:22:52.766 00:00:00.226 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:22:52.766 00:00:00.170 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:22:52.827 00:01:00.090 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:24:12.813 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:19:52.766 00:05:50.981 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-18 03:24:52.828 00:00:00.089 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:23:52.767 00:01:00.227 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-18 03:23:52.767 00:01:00.170 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:20:52.787 00:05:50.940 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-18 03:25:52.768 00:00:00.228 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:25:52.768 00:00:00.169 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:25:52.828 00:00:00.089 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:22:21.635 00:05:10.050 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2864 1 2025-10-18 03:26:52.828 00:00:00.090 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:26:52.768 00:00:00.227 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:26:52.768 00:00:00.170 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:27:52.769 00:00:00.227 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:27:52.769 00:00:00.169 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:27:52.828 00:01:00.090 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:29:13.022 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:28:52.769 00:01:00.228 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-18 03:28:52.769 00:01:00.170 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:29:52.829 00:00:00.089 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:25:52.768 00:05:50.980 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-18 03:30:52.831 00:00:00.089 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:26:52.788 00:05:50.941 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-18 03:31:52.829 00:00:00.091 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:27:41.638 00:05:10.009 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-10-18 03:30:52.769 00:01:00.228 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-18 03:30:52.769 00:01:00.171 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:32:52.829 00:00:00.092 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:32:52.769 00:00:00.228 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:32:52.769 00:00:00.172 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:33:52.831 00:00:00.091 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:34:12.986 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:33:52.771 00:01:00.227 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-18 03:33:52.771 00:01:00.172 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:34:52.830 00:01:00.093 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:31:52.770 00:05:50.982 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-18 03:35:52.771 00:01:00.228 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-10-18 03:35:52.771 00:01:00.172 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:36:52.831 00:00:00.092 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:33:01.647 00:05:10.004 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2852 1 2025-10-18 03:32:52.789 00:05:50.942 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-18 03:37:52.831 00:00:00.092 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:37:52.772 00:00:00.172 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:37:52.772 00:00:00.227 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:38:52.832 00:00:00.092 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:38:52.773 00:00:00.226 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:38:52.773 00:00:00.171 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:39:13.265 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:39:52.773 00:00:00.226 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-10-18 03:39:52.773 00:00:00.172 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:39:52.833 00:01:00.093 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:41:52.833 00:00:00.093 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:40:52.775 00:01:00.171 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:38:21.652 00:05:10.005 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-10-18 03:37:52.770 00:05:50.982 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-18 03:42:52.833 00:00:00.093 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:42:52.774 00:00:00.174 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:38:52.792 00:05:50.940 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-18 03:43:52.773 00:00:00.173 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:43:52.833 00:00:00.093 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:44:13.214 00:00:00.025 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:44:52.775 00:00:00.174 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:40:52.776 00:05:00.226 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-10-18 03:44:52.833 00:01:00.093 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:46:52.833 00:00:00.096 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:45:52.773 00:01:00.178 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:47:52.774 00:00:00.173 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:43:41.656 00:05:10.003 OSPF 28.0.7.1:0 -> 224.0.0.5:0 42 3056 1 2025-10-18 03:47:52.833 00:00:00.093 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:43:52.773 00:05:50.981 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-18 03:48:52.834 00:00:00.092 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:48:52.774 00:00:00.172 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:49:13.247 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:44:52.793 00:05:50.940 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-18 03:49:52.774 00:00:00.172 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:49:52.835 00:01:00.092 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:46:52.773 00:05:00.230 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-10-18 03:50:52.775 00:01:00.172 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:51:52.834 00:00:00.092 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:52:52.836 00:00:00.092 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:52:52.775 00:00:00.173 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:49:01.660 00:05:00.647 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 2888 1 2025-10-18 03:53:52.835 00:00:00.093 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:53:52.775 00:00:00.173 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:54:13.501 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-18 03:49:52.775 00:05:50.980 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-10-18 03:54:52.775 00:00:00.173 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:50:52.795 00:05:50.941 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-10-18 03:54:52.835 00:01:00.093 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-10-18 03:56:52.836 00:00:00.093 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:55:52.777 00:01:00.172 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-10-18 03:52:52.775 00:05:00.229 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-10-18 03:57:52.776 00:00:00.173 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:57:52.837 00:00:00.092 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-10-18 03:54:11.668 00:05:10.007 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2468 1 2025-10-18 03:58:52.776 00:00:00.173 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-10-18 03:58:52.839 00:00:00.090 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 Summary: total flows: 175, total bytes: 72371, total packets: 1092, avg bps: 151, avg pps: 0, avg bpp: 66 Time window: 2025-10-18 02:55:51 - 2025-10-18 03:59:21 Total flows processed: 175, passed: 175, Blocks skipped: 0, Bytes read: 18264 Sys: 0.0047s User: 0.0009s Wall: 0.0020s flows/second: 89338.3 Runtime: 0.0020s