Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-04 09:53:53.012 00:06:00.362 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-04 09:55:51.481 00:05:00.625 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-04 09:56:51.531 00:05:00.562 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-04 09:56:51.377 00:05:00.759 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-04 09:55:52.028 00:06:00.128 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-04 09:57:51.758 00:05:00.337 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-04 09:57:51.339 00:05:00.767 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-04 09:57:51.388 00:05:00.718 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-04 09:56:53.062 00:06:00.261 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-04 09:57:51.709 00:05:00.417 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-04 09:58:08.069 00:05:10.007 OSPF 28.0.3.1:0 -> 224.0.0.5:0 49 3540 1 2025-07-04 09:58:51.330 00:05:00.787 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-04 10:03:11.900 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:03:11.860 00:00:00.020 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 09:59:52.058 00:06:00.049 TCP 28.153.0.1:179 -> 28.155.0.1:35531 13 809 1 2025-07-04 10:01:51.482 00:05:00.627 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-04 10:00:53.014 00:06:00.359 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-04 10:02:51.531 00:05:00.568 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-04 10:02:51.379 00:05:00.759 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-04 10:03:28.076 00:05:10.017 OSPF 28.0.3.1:0 -> 224.0.0.5:0 42 3216 1 2025-07-04 10:02:52.057 00:06:00.100 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-04 10:03:51.710 00:05:00.419 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-04 10:03:51.759 00:05:00.340 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-04 10:03:51.341 00:05:00.766 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-04 10:03:51.388 00:05:00.719 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-04 10:08:12.104 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:08:12.099 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 10:03:53.064 00:06:00.260 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-04 10:04:51.332 00:05:00.786 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-04 10:06:52.107 00:06:00.000 TCP 28.153.0.1:179 -> 28.155.0.1:35531 7 497 1 2025-07-04 10:07:51.483 00:05:00.630 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-04 10:08:42.577 00:05:05.525 OSPF 28.0.3.1:0 -> 224.0.0.5:0 36 2460 1 2025-07-04 10:08:51.379 00:05:00.759 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-04 10:08:51.536 00:05:00.567 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-04 10:07:53.016 00:06:00.358 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-04 10:13:12.160 00:00:00.031 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:13:12.086 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 10:09:51.711 00:05:00.422 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-04 10:09:51.761 00:05:00.342 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-04 10:09:51.344 00:05:00.764 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-04 10:09:51.390 00:05:00.718 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-04 10:09:52.064 00:06:00.105 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-04 10:10:51.334 00:05:00.784 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-04 10:10:53.066 00:06:00.259 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-04 10:13:51.486 00:05:00.628 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-04 10:13:58.102 00:05:10.008 OSPF 28.0.3.1:0 -> 224.0.0.5:0 32 2176 1 2025-07-04 10:18:12.172 00:00:00.044 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:18:12.217 00:00:00.049 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 10:14:51.537 00:05:00.569 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-04 10:13:52.108 00:06:00.001 TCP 28.153.0.1:179 -> 28.155.0.1:35531 7 497 1 2025-07-04 10:14:51.380 00:05:00.759 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-04 10:15:51.712 00:05:00.424 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-04 10:15:51.346 00:05:00.764 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-04 10:15:51.390 00:05:00.720 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-04 10:14:53.016 00:06:00.359 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-04 10:15:51.761 00:05:00.344 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-04 10:16:51.335 00:05:00.784 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-04 10:16:52.063 00:06:00.098 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-04 10:17:53.067 00:06:00.259 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-04 10:23:12.313 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 10:23:12.173 00:00:00.029 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:19:18.109 00:05:04.900 OSPF 28.0.3.1:0 -> 224.0.0.5:0 33 2252 1 2025-07-04 10:19:51.488 00:05:00.636 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-04 10:20:51.538 00:05:00.570 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-04 10:20:51.388 00:05:00.755 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-04 10:21:51.767 00:05:00.341 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-04 10:21:51.347 00:05:00.768 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-04 10:21:51.399 00:05:00.716 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-04 10:20:52.111 00:06:00.004 TCP 28.153.0.1:179 -> 28.155.0.1:35531 7 497 1 2025-07-04 10:21:51.717 00:05:00.421 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-04 10:21:53.019 00:06:00.358 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-04 10:22:51.337 00:05:00.789 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-04 10:28:12.434 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:28:12.522 00:00:00.021 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 10:24:28.115 00:05:10.017 OSPF 28.0.3.1:0 -> 224.0.0.5:0 43 3012 1 2025-07-04 10:23:52.065 00:06:00.101 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-04 10:24:53.070 00:06:00.259 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-04 10:25:51.489 00:05:00.631 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-04 10:26:51.540 00:05:00.569 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-04 10:26:51.390 00:05:00.757 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-04 10:27:51.718 00:05:00.422 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-04 10:27:51.767 00:05:00.342 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-04 10:27:51.348 00:05:00.768 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-04 10:27:51.399 00:05:00.717 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-04 10:28:51.340 00:05:00.787 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-04 10:27:52.116 00:06:00.001 TCP 28.153.0.1:179 -> 28.155.0.1:35531 7 497 1 2025-07-04 10:33:12.474 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:33:12.588 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 10:28:53.021 00:06:00.358 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-04 10:29:48.132 00:05:06.043 OSPF 28.0.3.1:0 -> 224.0.0.5:0 43 3092 1 2025-07-04 10:31:51.490 00:05:00.631 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-04 10:30:52.069 00:06:00.099 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-04 10:32:51.540 00:05:00.571 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-04 10:31:53.069 00:06:00.259 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-04 10:32:51.390 00:05:00.757 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-04 10:33:51.768 00:05:00.342 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-04 10:33:51.350 00:05:00.766 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-04 10:33:51.400 00:05:00.717 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-04 10:33:51.719 00:05:00.422 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-04 10:38:12.517 00:00:00.021 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:38:12.687 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 10:34:51.340 00:05:00.787 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-04 10:34:58.137 00:05:10.003 OSPF 28.0.3.1:0 -> 224.0.0.5:0 41 3112 1 2025-07-04 10:34:52.118 00:06:00.001 TCP 28.153.0.1:179 -> 28.155.0.1:35531 7 497 1 2025-07-04 10:35:53.020 00:06:00.359 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-04 10:37:51.491 00:05:00.631 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-04 10:38:51.392 00:05:00.757 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-04 10:37:52.070 00:06:00.099 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-04 10:38:51.540 00:05:00.571 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-04 10:43:12.848 00:00:00.024 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:43:12.956 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 10:39:51.770 00:05:00.342 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-04 10:39:51.352 00:05:00.767 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-04 10:39:51.402 00:05:00.717 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-04 10:38:53.071 00:06:00.259 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-04 10:39:51.720 00:05:00.422 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-04 10:40:18.141 00:05:10.006 OSPF 28.0.3.1:0 -> 224.0.0.5:0 33 2240 1 2025-07-04 10:40:51.342 00:05:00.787 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-04 10:41:52.118 00:06:00.001 TCP 28.153.0.1:179 -> 28.155.0.1:35531 7 497 1 2025-07-04 10:42:53.023 00:06:00.357 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-04 10:43:51.494 00:05:00.628 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-04 10:48:12.719 00:00:00.021 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:48:12.852 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 10:44:51.393 00:05:00.756 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-04 10:44:51.546 00:05:00.566 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-04 10:45:51.771 00:05:00.343 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-04 10:45:51.353 00:05:00.767 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-04 10:45:51.404 00:05:00.716 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-04 10:45:38.146 00:05:10.007 OSPF 28.0.3.1:0 -> 224.0.0.5:0 32 2176 1 2025-07-04 10:44:52.072 00:06:00.097 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-04 10:45:51.720 00:05:00.423 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-04 10:45:53.072 00:06:00.263 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-04 10:46:51.342 00:05:00.787 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-04 10:53:12.952 00:00:00.028 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-04 10:53:12.908 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:48:52.118 00:06:00.001 TCP 28.153.0.1:179 -> 28.155.0.1:35531 7 497 1 2025-07-04 10:49:51.499 00:05:00.629 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-04 10:50:51.549 00:05:00.569 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-04 10:49:53.057 00:06:00.329 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-04 10:50:51.396 00:05:00.755 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-04 10:50:58.154 00:05:10.005 OSPF 28.0.3.1:0 -> 224.0.0.5:0 35 2384 1 2025-07-04 10:51:51.725 00:05:00.430 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-04 10:51:51.405 00:05:00.725 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-04 10:51:51.775 00:05:00.350 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-04 10:51:51.357 00:05:00.773 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-04 10:51:52.075 00:06:00.105 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-04 10:52:51.347 00:05:00.793 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-04 10:52:53.116 00:06:00.221 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-04 10:58:13.128 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-04 10:58:13.321 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 Summary: total flows: 150, total bytes: 122283, total packets: 1891, avg bps: 250, avg pps: 0, avg bpp: 64 Time window: 2025-07-04 09:53:53 - 2025-07-04 10:58:53 Total flows processed: 150, passed: 150, Blocks skipped: 0, Bytes read: 15664 Sys: 0.0028s User: 0.0018s Wall: 0.0027s flows/second: 55617.5 Runtime: 0.0027s