Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-07 09:59:02.610 00:00:00.208 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 09:59:02.685 00:00:00.133 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 09:54:42.579 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 34 2372 1 2025-11-07 09:59:02.667 00:00:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 09:58:58.619 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:00:02.666 00:01:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:00:02.611 00:01:00.207 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:00:02.686 00:01:00.132 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 09:56:54.655 00:05:08.162 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-07 10:02:02.666 00:00:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:02:02.686 00:00:00.132 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 09:58:02.837 00:05:51.801 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-07 10:03:02.666 00:00:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:02:02.612 00:01:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:03:02.686 00:00:00.132 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:04:02.612 00:00:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:04:02.686 00:00:00.132 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:04:02.666 00:00:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:03:58.638 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:00:02.586 00:05:10.004 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2664 1 2025-11-07 10:05:02.666 00:01:00.213 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:05:02.613 00:01:00.207 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:05:02.687 00:01:00.133 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:02:54.657 00:05:08.162 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-07 10:07:02.667 00:01:00.213 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:07:02.614 00:01:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:07:02.688 00:01:00.132 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:04:02.839 00:05:51.799 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-07 10:09:02.615 00:00:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:09:02.689 00:00:00.132 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:09:02.667 00:00:00.213 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:08:58.823 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:05:22.592 00:05:10.002 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-07 10:10:02.668 00:01:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:10:02.615 00:01:00.207 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:10:02.689 00:01:00.133 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:12:02.615 00:01:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:12:02.688 00:01:00.133 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:12:02.669 00:01:00.213 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:08:54.658 00:05:08.164 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-07 10:14:02.616 00:00:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:14:02.688 00:00:00.134 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:14:02.667 00:00:00.214 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:13:59.059 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:10:42.593 00:05:10.032 OSPF 28.0.7.1:0 -> 224.0.0.5:0 41 3060 1 2025-11-07 10:10:02.840 00:05:51.798 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-07 10:15:02.669 00:01:00.215 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:15:02.618 00:01:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:15:02.689 00:01:00.135 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:17:02.668 00:01:00.216 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:17:02.616 00:01:00.208 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:17:02.688 00:01:00.136 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:19:02.668 00:00:00.216 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:18:59.091 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:19:02.616 00:00:00.207 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:19:02.688 00:00:00.135 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:14:54.658 00:05:08.166 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-07 10:15:53.526 00:05:09.080 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2864 1 2025-11-07 10:16:02.843 00:05:51.796 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-07 10:20:02.669 00:01:00.217 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:20:02.690 00:01:00.138 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:20:02.618 00:01:00.210 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:22:02.617 00:01:00.210 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:22:02.689 00:01:00.138 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:22:02.669 00:01:00.219 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:24:02.670 00:00:00.218 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:23:59.097 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:24:02.616 00:00:00.210 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:24:02.688 00:00:00.138 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:25:02.617 00:00:00.210 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:25:02.689 00:00:00.138 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:25:02.670 00:00:00.218 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:20:54.659 00:05:08.168 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-07 10:21:12.608 00:05:10.003 OSPF 28.0.7.1:0 -> 224.0.0.5:0 39 2740 1 2025-11-07 10:26:02.670 00:00:00.218 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:26:02.691 00:00:00.138 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:26:02.619 00:00:00.210 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:22:02.846 00:05:51.796 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-07 10:27:02.670 00:01:00.218 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:27:02.618 00:01:00.210 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:27:02.690 00:01:00.138 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:29:02.672 00:00:00.217 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:28:59.063 00:00:00.026 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:29:02.693 00:00:00.137 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:30:02.671 00:00:00.219 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:29:02.618 00:01:00.212 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:30:02.691 00:00:00.139 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:26:32.610 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2664 1 2025-11-07 10:31:02.671 00:00:00.219 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:31:02.692 00:00:00.139 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:31:02.620 00:00:00.211 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:26:54.661 00:05:08.170 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-07 10:28:02.848 00:05:51.795 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-07 10:32:02.672 00:01:00.219 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:32:02.618 00:01:00.212 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:32:02.691 00:01:00.139 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:34:02.672 00:00:00.219 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:33:59.447 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:34:02.693 00:00:00.139 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:35:02.672 00:00:00.219 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:34:02.620 00:01:00.211 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:35:02.693 00:00:00.138 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:36:02.673 00:00:00.218 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:36:02.620 00:00:00.211 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:36:02.693 00:00:00.138 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:31:52.618 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-07 10:32:54.663 00:05:08.170 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-07 10:37:02.672 00:01:00.220 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:37:02.620 00:01:00.212 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:37:02.692 00:01:00.140 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:34:02.852 00:05:51.795 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-07 10:38:59.584 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:39:02.697 00:01:00.195 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:39:02.622 00:01:00.211 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:39:02.718 00:01:00.115 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:41:02.625 00:00:00.209 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:41:02.694 00:00:00.140 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:41:02.674 00:00:00.220 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:37:12.626 00:05:10.007 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2796 1 2025-11-07 10:42:02.673 00:01:00.220 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:42:02.626 00:01:00.207 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:42:02.694 00:01:00.139 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:38:54.667 00:05:08.167 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-07 10:43:59.676 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:40:02.853 00:05:51.795 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-07 10:44:02.675 00:01:00.219 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:44:02.627 00:01:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:44:02.694 00:01:00.140 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:46:02.674 00:00:00.229 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:46:02.627 00:00:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:46:02.694 00:00:00.139 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:42:32.635 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 41 3052 1 2025-11-07 10:47:02.675 00:01:00.220 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:47:02.627 00:01:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:47:02.694 00:01:00.139 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:48:59.669 00:00:00.024 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:44:54.667 00:05:08.167 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-07 10:49:02.674 00:01:00.219 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:49:02.695 00:01:00.139 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:49:02.628 00:01:00.206 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:46:02.854 00:05:51.799 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-07 10:51:02.675 00:00:00.220 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:51:02.629 00:00:00.205 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:51:02.695 00:00:00.140 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:47:52.643 00:05:10.012 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 2820 1 2025-11-07 10:52:02.676 00:01:00.221 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:52:02.696 00:01:00.141 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:52:02.630 00:01:00.207 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:53:59.963 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-07 10:54:02.629 00:01:00.207 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-07 10:54:02.697 00:01:00.139 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-07 10:54:02.677 00:01:00.219 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-07 10:50:54.670 00:05:08.167 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-07 10:56:02.628 00:00:00.208 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:56:02.700 00:00:00.136 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:56:02.681 00:00:00.215 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:52:02.856 00:05:51.797 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-07 10:57:02.683 00:00:00.214 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:57:02.630 00:00:00.207 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:57:02.703 00:00:00.134 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-07 10:53:12.655 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 36 2504 1 2025-11-07 10:58:02.682 00:00:00.215 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-07 10:58:02.631 00:00:00.207 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-07 10:58:02.703 00:00:00.135 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 Summary: total flows: 164, total bytes: 72260, total packets: 1090, avg bps: 151, avg pps: 0, avg bpp: 66 Time window: 2025-11-07 09:54:42 - 2025-11-07 10:58:22 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0032s Wall: 0.0025s flows/second: 65367.8 Runtime: 0.0025s