Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 15:59:07.765 00:00:00.198 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 15:55:07.724 00:05:51.073 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 15:59:07.704 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 15:59:07.704 00:01:00.279 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 16:00:07.766 00:00:00.199 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:01:07.705 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:01:07.705 00:00:00.278 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-16 16:01:07.765 00:01:00.199 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:02:07.705 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:02:07.705 00:00:00.279 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-16 16:03:07.765 00:00:00.199 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:03:07.705 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:03:07.705 00:00:00.279 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-11-16 16:03:25.968 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 15:59:30.838 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 33 2256 1 2025-11-16 16:04:07.766 00:00:00.199 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 15:59:58.817 00:05:08.889 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 16:05:07.765 00:00:00.200 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:04:07.705 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:04:07.705 00:01:00.279 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 16:01:07.725 00:05:51.075 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 16:06:07.707 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:06:07.767 00:01:00.218 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:08:07.707 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:06:07.706 00:02:00.292 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-11-16 16:08:25.907 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 16:04:50.846 00:05:10.020 OSPF 28.0.7.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-16 16:08:07.767 00:01:00.208 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:09:07.707 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:09:07.707 00:01:00.288 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-11-16 16:10:07.768 00:00:00.208 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:05:58.819 00:05:08.888 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 16:11:07.768 00:00:00.210 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:07:07.726 00:05:51.074 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 16:12:07.768 00:00:00.228 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:11:07.709 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:13:07.707 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:13:25.972 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 16:13:07.769 00:01:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:10:10.867 00:05:10.008 OSPF 28.0.7.1:0 -> 224.0.0.5:0 42 3132 1 2025-11-16 16:15:07.768 00:00:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:14:07.707 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:11:07.707 00:05:00.294 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-11-16 16:16:07.769 00:00:00.211 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:11:58.821 00:05:08.889 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 16:16:07.709 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:17:07.770 00:00:00.226 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:13:07.729 00:05:51.074 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 16:18:07.709 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:18:26.236 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 16:19:07.709 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:18:07.770 00:01:00.214 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:15:30.875 00:05:10.001 OSPF 28.0.7.1:0 -> 224.0.0.5:0 38 2760 1 2025-11-16 16:20:07.711 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:20:07.770 00:00:00.214 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:21:07.769 00:00:00.214 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:17:07.709 00:05:00.296 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-11-16 16:21:07.709 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:22:07.769 00:00:00.214 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:17:58.822 00:05:08.888 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 16:23:07.710 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:23:26.604 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 16:19:07.729 00:05:51.074 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 16:23:07.770 00:01:00.213 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:24:07.710 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:20:50.878 00:05:11.018 OSPF 28.0.7.1:0 -> 224.0.0.5:0 43 2976 1 2025-11-16 16:25:07.771 00:00:00.213 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:25:07.710 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:26:07.771 00:00:00.213 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:26:07.712 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:27:07.772 00:00:00.213 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:23:07.712 00:05:00.295 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-11-16 16:28:07.712 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:23:58.824 00:05:08.890 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 16:28:26.313 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 16:28:07.771 00:01:00.213 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:29:07.713 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:25:07.730 00:05:51.075 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 16:30:07.713 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:30:07.773 00:00:00.211 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:26:10.882 00:05:10.004 OSPF 28.0.7.1:0 -> 224.0.0.5:0 35 2440 1 2025-11-16 16:31:07.774 00:00:00.211 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:32:07.773 00:00:00.211 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:31:07.714 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:33:07.714 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:29:07.715 00:05:00.293 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-11-16 16:33:26.450 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 16:33:07.773 00:01:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:34:07.713 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:29:58.825 00:05:08.888 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 16:35:07.713 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:35:07.774 00:00:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:31:30.886 00:05:10.007 OSPF 28.0.7.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-16 16:31:07.734 00:05:51.073 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 16:36:07.775 00:00:00.211 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:36:07.714 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:37:07.776 00:00:00.211 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:38:26.538 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 16:38:07.714 00:01:00.001 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:38:07.774 00:01:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:35:07.713 00:05:00.294 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-11-16 16:40:07.716 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:35:58.828 00:05:08.888 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 16:36:50.894 00:05:10.003 OSPF 28.0.7.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-16 16:40:07.774 00:01:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:37:07.734 00:05:51.073 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 16:42:07.776 00:00:00.211 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:41:07.715 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:43:26.605 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 16:43:07.715 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:43:07.775 00:01:00.223 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:45:07.717 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:41:07.715 00:05:00.302 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-11-16 16:45:07.777 00:01:00.218 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:41:58.827 00:05:08.891 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 16:42:10.895 00:05:10.005 OSPF 28.0.7.1:0 -> 224.0.0.5:0 40 3016 1 2025-11-16 16:46:07.717 00:01:00.001 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:47:07.778 00:00:00.217 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:43:07.735 00:05:51.075 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 16:48:07.779 00:00:00.216 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:48:26.802 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 16:49:07.781 00:00:00.215 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:48:07.718 00:01:00.002 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:50:07.721 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:51:07.720 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:50:07.781 00:01:00.216 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:47:07.719 00:05:00.299 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-11-16 16:47:30.902 00:05:00.377 OSPF 28.0.7.1:0 -> 224.0.0.5:0 44 3084 1 2025-11-16 16:52:07.721 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:52:07.782 00:00:00.215 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:47:58.830 00:05:08.891 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 16:53:07.780 00:00:00.216 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:53:26.627 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-16 16:49:07.741 00:05:51.070 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-11-16 16:53:07.721 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 16:54:07.782 00:00:00.216 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:55:07.721 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:56:07.721 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:55:07.782 00:01:00.217 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-11-16 16:52:40.910 00:05:10.005 OSPF 28.0.7.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-16 16:57:07.721 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 16:57:07.783 00:00:00.216 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-11-16 16:53:07.721 00:05:00.299 TCP 28.155.0.1:179 -> 28.156.0.1:37457 12 738 1 2025-11-16 16:53:58.830 00:05:08.892 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-11-16 16:58:27.297 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 Summary: total flows: 145, total bytes: 66330, total packets: 990, avg bps: 138, avg pps: 0, avg bpp: 67 Time window: 2025-11-16 15:55:07 - 2025-11-16 16:59:07 Total flows processed: 145, passed: 145, Blocks skipped: 0, Bytes read: 15144 Sys: 0.0030s User: 0.0030s Wall: 0.0027s flows/second: 53171.4 Runtime: 0.0027s