Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 05:58:07.451 00:01:00.060 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 05:58:07.451 00:01:00.242 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 05:58:07.511 00:01:00.162 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 05:55:07.470 00:05:51.153 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 06:00:07.514 00:00:00.161 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 05:57:49.991 00:05:00.010 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2436 1 2025-11-16 06:00:07.455 00:02:00.056 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-11-16 06:00:07.455 00:02:00.241 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-11-16 06:01:07.514 00:01:00.161 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:03:14.092 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:03:07.515 00:01:00.160 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:03:07.455 00:01:00.055 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:03:07.455 00:01:00.240 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 05:59:58.643 00:05:08.812 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 06:05:07.515 00:00:00.160 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 06:01:07.474 00:05:51.151 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 06:05:07.455 00:02:00.055 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-11-16 06:05:07.455 00:02:00.240 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-11-16 06:06:07.516 00:01:00.160 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:03:00.000 00:05:10.012 OSPF 28.0.7.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-16 06:08:13.623 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:08:07.516 00:01:00.160 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:08:07.458 00:01:00.059 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:08:07.458 00:01:00.239 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:05:58.646 00:05:08.811 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 06:10:07.457 00:01:00.055 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:10:07.457 00:01:00.240 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:07:07.476 00:05:51.150 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 06:10:07.516 00:02:00.160 TCP 28.156.0.1:37457 -> 28.155.0.1:179 6 369 1 2025-11-16 06:12:07.457 00:00:00.054 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 06:12:07.457 00:00:00.240 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-16 06:08:20.013 00:05:10.004 OSPF 28.0.7.1:0 -> 224.0.0.5:0 44 3400 1 2025-11-16 06:13:13.972 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:13:07.516 00:01:00.162 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:13:07.456 00:01:00.055 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:13:07.456 00:01:00.242 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:15:07.457 00:01:00.056 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:15:07.457 00:01:00.242 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:11:58.646 00:05:08.812 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 06:17:07.458 00:00:00.055 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 06:17:07.458 00:00:00.240 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-16 06:15:07.518 00:02:00.161 TCP 28.156.0.1:37457 -> 28.155.0.1:179 6 369 1 2025-11-16 06:13:40.016 00:05:10.055 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2740 1 2025-11-16 06:13:07.477 00:05:51.152 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 06:18:14.143 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:18:07.519 00:01:00.173 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:18:07.458 00:01:00.055 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:18:07.458 00:01:00.253 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:20:07.461 00:01:00.052 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:20:07.461 00:01:00.252 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:20:07.521 00:01:00.172 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:22:07.524 00:00:00.171 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 06:17:58.648 00:05:08.816 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 06:19:00.058 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 2772 1 2025-11-16 06:23:14.170 00:00:00.039 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:19:07.481 00:05:51.150 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 06:23:07.525 00:01:00.171 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:22:07.465 00:02:00.050 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-11-16 06:22:07.465 00:02:00.251 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-11-16 06:25:07.534 00:01:00.161 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:25:07.475 00:01:00.041 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:25:07.475 00:01:00.241 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:27:07.526 00:00:00.169 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 06:23:58.652 00:05:08.817 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 06:28:14.354 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:24:20.065 00:05:10.016 OSPF 28.0.7.1:0 -> 224.0.0.5:0 37 2600 1 2025-11-16 06:28:07.527 00:01:00.169 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:27:07.466 00:02:00.049 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-11-16 06:27:07.467 00:02:00.249 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-11-16 06:25:07.495 00:05:51.138 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 06:30:07.468 00:01:00.047 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:30:07.468 00:01:00.247 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:30:07.529 00:01:00.167 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:32:07.528 00:00:00.167 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 06:33:14.399 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:29:40.071 00:05:10.011 OSPF 28.0.7.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-16 06:33:07.529 00:01:00.167 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:32:07.468 00:02:00.047 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-11-16 06:32:07.468 00:02:00.248 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-11-16 06:29:58.653 00:05:08.816 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 06:31:07.488 00:05:51.145 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 06:35:07.469 00:01:00.046 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:35:07.469 00:01:00.247 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:35:07.530 00:01:00.167 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:37:07.532 00:00:00.166 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 06:38:14.342 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:38:07.531 00:01:00.180 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:37:07.470 00:02:00.045 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-11-16 06:37:07.470 00:02:00.260 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-11-16 06:35:00.084 00:05:10.006 OSPF 28.0.7.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-16 06:35:58.654 00:05:08.826 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 06:40:07.479 00:01:00.047 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:40:07.479 00:01:00.238 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:40:07.540 00:01:00.157 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:37:07.491 00:05:51.143 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 06:42:07.541 00:00:00.157 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 06:42:07.480 00:01:00.238 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:43:14.501 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:43:07.539 00:01:00.163 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:42:07.480 00:02:00.039 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-11-16 06:44:07.481 00:00:00.244 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-16 06:40:20.089 00:05:10.005 OSPF 28.0.7.1:0 -> 224.0.0.5:0 43 3212 1 2025-11-16 06:45:07.479 00:01:00.039 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:45:07.479 00:01:00.238 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:45:07.539 00:01:00.158 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:41:58.654 00:05:08.827 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 06:43:07.500 00:05:51.135 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 06:47:07.480 00:01:00.038 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:47:07.480 00:01:00.237 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:48:15.152 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:47:07.541 00:02:00.158 TCP 28.156.0.1:37457 -> 28.155.0.1:179 6 369 1 2025-11-16 06:49:07.481 00:00:00.038 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 06:49:07.481 00:00:00.239 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-16 06:45:40.094 00:05:10.005 OSPF 28.0.7.1:0 -> 224.0.0.5:0 41 2948 1 2025-11-16 06:50:07.540 00:01:00.160 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:50:07.482 00:01:00.038 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:50:07.482 00:01:00.240 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:47:58.654 00:05:08.827 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 06:52:07.481 00:01:00.039 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:52:07.481 00:01:00.241 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:52:07.541 00:01:00.161 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:53:14.865 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 06:49:07.500 00:05:51.136 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 06:54:07.482 00:00:00.037 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 06:54:07.482 00:00:00.240 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-16 06:54:07.543 00:00:00.160 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 06:51:00.099 00:05:10.003 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2664 1 2025-11-16 06:55:07.482 00:01:00.037 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:55:07.482 00:01:00.240 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:55:07.542 00:01:00.160 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:57:07.544 00:01:00.158 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 06:57:07.485 00:01:00.039 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 06:57:07.485 00:01:00.239 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 06:53:58.656 00:05:08.829 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 06:58:14.931 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 Summary: total flows: 135, total bytes: 70005, total packets: 1058, avg bps: 145, avg pps: 0, avg bpp: 66 Time window: 2025-11-16 05:55:07 - 2025-11-16 06:59:07 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0041s User: 0.0008s Wall: 0.0021s flows/second: 64104.0 Runtime: 0.0021s