Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 11:58:07.601 00:01:00.016 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 11:55:58.732 00:05:08.834 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-11-16 12:00:07.602 00:01:00.015 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:02:07.601 00:00:00.015 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 11:58:50.525 00:05:10.843 OSPF 28.0.6.1:0 -> 224.0.0.5:0 42 2988 1 2025-11-16 11:58:58.721 00:05:08.856 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-11-16 12:03:21.021 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:03:21.208 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:03:21.196 00:00:00.020 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:03:21.124 00:00:00.020 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:03:21.191 00:00:00.029 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:03:21.330 00:00:00.023 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:03:21.018 00:00:00.020 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:03:21.157 00:00:00.023 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:03:07.601 00:01:00.017 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:05:07.603 00:01:00.017 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:01:58.734 00:05:08.835 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-11-16 12:07:07.605 00:00:00.015 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 12:08:21.548 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:08:21.506 00:00:00.022 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:08:21.514 00:00:00.023 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:08:21.464 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:08:21.551 00:00:00.023 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:08:21.462 00:00:00.023 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:08:21.606 00:00:00.023 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:08:21.497 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:04:10.534 00:05:10.005 OSPF 28.0.6.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-16 12:08:07.604 00:01:00.015 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:04:58.725 00:05:08.855 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-11-16 12:10:07.607 00:01:00.014 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:12:07.608 00:00:00.013 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 12:07:58.735 00:05:08.837 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-11-16 12:13:21.300 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:13:21.061 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:13:20.975 00:00:00.032 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:13:21.215 00:00:00.034 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:13:21.301 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:13:21.366 00:00:00.025 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:13:21.292 00:00:00.022 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:13:21.117 00:00:00.023 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:09:30.538 00:05:10.002 OSPF 28.0.6.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-16 12:13:07.607 00:01:00.016 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:10:58.727 00:05:08.860 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-11-16 12:15:07.613 00:01:00.014 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:17:07.615 00:00:00.013 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 12:13:58.737 00:05:08.840 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-11-16 12:18:21.583 00:00:00.021 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:18:21.726 00:00:00.013 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:18:21.641 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:18:21.694 00:00:00.032 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:18:21.736 00:00:00.032 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:18:21.836 00:00:00.023 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:18:21.587 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:18:21.697 00:00:00.029 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:14:50.542 00:05:10.007 OSPF 28.0.6.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-16 12:18:07.616 00:01:00.012 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:20:07.616 00:01:00.011 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:16:58.731 00:05:08.856 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-11-16 12:22:07.616 00:00:00.012 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 12:23:07.616 00:00:00.013 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 12:23:21.330 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:23:21.513 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:23:21.295 00:00:00.045 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:23:21.352 00:00:00.024 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:23:21.579 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:23:21.559 00:00:00.021 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:23:21.419 00:00:00.022 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:23:21.121 00:00:00.022 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:24:07.616 00:00:00.013 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 12:19:58.745 00:05:08.835 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-11-16 12:20:10.549 00:05:10.121 OSPF 28.0.6.1:0 -> 224.0.0.5:0 42 3060 1 2025-11-16 12:25:07.616 00:01:00.017 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:22:58.735 00:05:08.857 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-11-16 12:27:07.616 00:01:00.016 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-11-16 12:28:21.524 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:28:21.583 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:28:21.619 00:00:00.023 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:28:21.457 00:00:00.021 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:28:21.552 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:28:21.499 00:00:00.023 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:28:21.470 00:00:00.026 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:28:21.586 00:00:00.022 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:29:07.633 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-11-16 12:25:30.554 00:05:10.161 OSPF 28.0.6.1:0 -> 224.0.0.5:0 40 2860 1 2025-11-16 12:25:58.746 00:05:08.837 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-11-16 12:30:07.634 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:32:07.634 00:01:00.004 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:28:58.739 00:05:08.855 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-11-16 12:33:22.000 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:33:22.177 00:00:00.021 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:33:22.214 00:00:00.023 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:33:22.159 00:00:00.021 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:33:22.287 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:33:22.265 00:00:00.030 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:33:22.161 00:00:00.022 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:33:22.350 00:00:00.023 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:34:07.636 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 12:30:50.563 00:05:10.001 OSPF 28.0.6.1:0 -> 224.0.0.5:0 41 2816 1 2025-11-16 12:35:07.637 00:01:00.001 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:31:58.749 00:05:08.835 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-11-16 12:37:07.643 00:01:00.001 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:38:21.743 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:38:21.678 00:00:00.023 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:38:21.721 00:00:00.022 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:38:21.540 00:00:00.027 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:38:21.662 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:38:21.752 00:00:00.022 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:38:21.724 00:00:00.021 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:38:21.699 00:00:00.022 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:39:07.644 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 12:34:58.740 00:05:08.857 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-11-16 12:36:10.563 00:05:10.295 OSPF 28.0.6.1:0 -> 224.0.0.5:0 37 2568 1 2025-11-16 12:40:07.644 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:37:58.750 00:05:08.837 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-11-16 12:42:07.644 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:43:21.778 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:43:21.778 00:00:00.021 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:43:21.937 00:00:00.022 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:43:21.741 00:00:00.023 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:43:21.875 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:43:21.778 00:00:00.021 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:43:21.808 00:00:00.021 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:43:21.841 00:00:00.022 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:44:07.644 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 12:40:58.740 00:05:08.863 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-11-16 12:41:30.572 00:05:10.007 OSPF 28.0.6.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-16 12:45:07.646 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:47:07.646 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:43:58.750 00:05:08.844 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-11-16 12:48:21.948 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:48:22.093 00:00:00.023 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:48:21.971 00:00:00.022 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:48:21.975 00:00:00.022 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:48:22.068 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:48:21.933 00:00:00.022 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:48:22.028 00:00:00.021 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:48:21.775 00:00:00.023 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:49:07.648 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 12:46:50.578 00:05:10.004 OSPF 28.0.6.1:0 -> 224.0.0.5:0 38 2772 1 2025-11-16 12:50:07.650 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:46:58.741 00:05:08.863 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-11-16 12:52:07.649 00:01:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:53:22.002 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:53:21.964 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:53:21.836 00:00:00.023 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:53:22.084 00:00:00.022 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:53:22.131 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:53:22.106 00:00:00.021 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:53:21.965 00:00:00.022 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:53:22.010 00:00:00.021 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:54:07.650 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 12:49:58.753 00:05:08.841 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-11-16 12:55:07.652 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 12:56:07.651 00:00:00.000 TCP 28.155.0.1:36643 -> 28.154.0.1:179 1 71 1 2025-11-16 12:52:10.581 00:05:10.007 OSPF 28.0.6.1:0 -> 224.0.0.5:0 40 2968 1 2025-11-16 12:52:58.744 00:05:08.861 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-11-16 12:57:07.650 00:01:00.021 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 142 1 2025-11-16 12:58:22.320 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:58:22.506 00:00:00.020 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-11-16 12:58:22.488 00:00:00.023 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:58:22.428 00:00:00.021 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:58:22.440 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-16 12:58:22.186 00:00:00.024 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-16 12:58:22.507 00:00:00.022 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-16 12:58:22.526 00:00:00.019 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 Summary: total flows: 165, total bytes: 74631, total packets: 1040, avg bps: 159, avg pps: 0, avg bpp: 71 Time window: 2025-11-16 11:55:58 - 2025-11-16 12:58:22 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0042s User: 0.0010s Wall: 0.0023s flows/second: 72756.5 Runtime: 0.0023s