Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 08:56:06.659 00:05:08.763 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-12-02 09:01:01.940 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.930 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.882 00:00:00.022 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.955 00:00:00.023 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:01:02.026 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:01:02.001 00:00:00.021 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.821 00:00:00.023 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.807 00:00:00.021 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 08:59:15.472 00:05:00.690 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-12-02 08:59:51.583 00:05:10.008 OSPF 28.0.6.1:0 -> 224.0.0.5:0 39 2796 1 2025-12-02 09:00:06.650 00:05:08.784 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-12-02 09:06:01.244 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.376 00:00:00.024 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.300 00:00:00.036 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.220 00:00:00.039 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.362 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.136 00:00:00.022 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.476 00:00:00.023 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:06:01.254 00:00:00.021 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:02:06.659 00:05:08.764 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-12-02 09:05:15.474 00:05:00.692 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-12-02 09:05:11.591 00:05:10.007 OSPF 28.0.6.1:0 -> 224.0.0.5:0 39 2728 1 2025-12-02 09:06:06.650 00:05:08.785 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-12-02 09:11:01.258 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.268 00:00:00.035 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.595 00:00:00.023 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.455 00:00:00.022 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.288 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.479 00:00:00.022 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.290 00:00:00.022 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:11:01.433 00:00:00.023 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:08:06.661 00:05:08.764 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-12-02 09:10:31.599 00:05:10.004 OSPF 28.0.6.1:0 -> 224.0.0.5:0 38 2728 1 2025-12-02 09:11:15.474 00:05:00.692 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-12-02 09:16:01.558 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.680 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.792 00:00:00.023 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.586 00:00:00.023 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.740 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.618 00:00:00.021 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.728 00:00:00.024 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.699 00:00:00.022 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:12:06.652 00:05:08.786 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-12-02 09:14:06.661 00:05:08.766 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-12-02 09:15:51.602 00:05:10.012 OSPF 28.0.6.1:0 -> 224.0.0.5:0 36 2560 1 2025-12-02 09:21:01.502 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.748 00:00:00.023 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.691 00:00:00.021 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.829 00:00:00.022 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.688 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.701 00:00:00.023 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.678 00:00:00.023 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:21:01.648 00:00:00.022 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:17:15.477 00:05:00.691 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-12-02 09:18:06.652 00:05:08.786 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-12-02 09:20:06.664 00:05:08.766 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-12-02 09:21:11.615 00:05:10.009 OSPF 28.0.6.1:0 -> 224.0.0.5:0 38 2660 1 2025-12-02 09:26:01.823 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.737 00:00:00.021 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.971 00:00:00.022 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.627 00:00:00.022 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.795 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.874 00:00:00.020 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.730 00:00:00.022 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:26:01.708 00:00:00.022 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:23:15.478 00:05:00.690 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-12-02 09:24:06.656 00:05:08.785 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-12-02 09:26:06.664 00:05:08.765 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-12-02 09:26:31.624 00:05:10.008 OSPF 28.0.6.1:0 -> 224.0.0.5:0 35 2508 1 2025-12-02 09:31:01.815 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.769 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:31:02.088 00:00:00.031 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:31:02.016 00:00:00.020 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.924 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:31:02.085 00:00:00.020 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.914 00:00:00.023 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.823 00:00:00.022 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:29:15.480 00:05:00.692 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-12-02 09:30:06.655 00:05:08.786 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-12-02 09:31:51.634 00:05:10.005 OSPF 28.0.6.1:0 -> 224.0.0.5:0 41 2816 1 2025-12-02 09:36:01.984 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.982 00:00:00.023 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.829 00:00:00.023 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:36:02.004 00:00:00.022 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.882 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.812 00:00:00.022 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.959 00:00:00.025 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:36:01.989 00:00:00.023 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:32:06.665 00:05:08.765 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-12-02 09:35:15.482 00:05:00.693 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-12-02 09:36:06.656 00:05:08.787 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-12-02 09:41:01.925 00:00:00.021 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.053 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:41:01.959 00:00:00.023 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.136 00:00:00.023 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:41:01.914 00:00:00.022 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.295 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.156 00:00:00.021 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:41:02.114 00:00:00.021 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:37:11.637 00:05:10.006 OSPF 28.0.6.1:0 -> 224.0.0.5:0 38 2728 1 2025-12-02 09:38:06.667 00:05:08.766 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-12-02 09:41:15.484 00:05:00.698 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-12-02 09:46:02.026 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:46:02.086 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:46:02.247 00:00:00.023 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:46:02.173 00:00:00.021 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:46:02.060 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:46:02.081 00:00:00.022 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:46:01.832 00:00:00.023 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:46:02.086 00:00:00.021 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:42:06.658 00:05:08.785 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-12-02 09:42:31.643 00:05:10.004 OSPF 28.0.6.1:0 -> 224.0.0.5:0 37 2640 1 2025-12-02 09:44:06.669 00:05:08.765 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-12-02 09:51:02.040 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.179 00:00:00.023 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:51:01.991 00:00:00.022 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.229 00:00:00.049 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.171 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.190 00:00:00.026 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.225 00:00:00.045 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:51:02.050 00:00:00.024 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:47:15.485 00:05:00.700 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-12-02 09:47:51.647 00:05:10.008 OSPF 28.0.6.1:0 -> 224.0.0.5:0 35 2452 1 2025-12-02 09:48:06.661 00:05:08.785 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 2025-12-02 09:50:06.674 00:05:08.762 TCP 28.154.0.1:36349 -> 28.152.0.1:179 12 738 1 2025-12-02 09:56:02.413 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.678 00:00:00.022 ICMP 30.107.0.1:0 -> 22.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.620 00:00:00.023 ICMP 30.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.422 00:00:00.023 ICMP 30.107.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.437 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.589 00:00:00.022 ICMP 32.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.434 00:00:00.021 ICMP 32.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:56:02.410 00:00:00.023 ICMP 30.107.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-02 09:53:15.485 00:05:00.700 TCP 28.155.0.1:36643 -> 28.154.0.1:179 12 738 1 2025-12-02 09:53:11.656 00:05:10.004 OSPF 28.0.6.1:0 -> 224.0.0.5:0 36 2464 1 2025-12-02 09:54:06.665 00:05:08.782 TCP 28.152.0.1:179 -> 28.154.0.1:36349 12 738 1 Summary: total flows: 137, total bytes: 75412, total packets: 1060, avg bps: 159, avg pps: 0, avg bpp: 71 Time window: 2025-12-02 08:56:06 - 2025-12-02 09:59:15 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0042s User: 0.0010s Wall: 0.0024s flows/second: 57559.8 Runtime: 0.0024s