Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-08 09:54:53.472 00:05:00.739 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-08 09:53:54.288 00:06:00.188 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-08 09:54:55.069 00:06:00.184 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-08 09:55:53.735 00:05:00.477 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-08 10:00:07.084 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:00:07.212 00:00:00.041 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 09:56:53.421 00:05:01.014 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-08 09:56:53.684 00:05:00.557 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-08 09:56:53.438 00:05:00.988 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-08 09:55:54.298 00:06:00.128 TCP 28.153.0.1:179 -> 28.155.0.1:35531 14 861 1 2025-07-08 09:58:53.434 00:05:00.993 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-08 09:58:53.431 00:05:01.027 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-08 09:59:16.885 00:05:10.002 OSPF 28.0.3.1:0 -> 224.0.0.5:0 32 2176 1 2025-07-08 09:59:53.424 00:05:00.799 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-08 10:00:53.474 00:05:00.739 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-08 09:59:55.120 00:06:00.083 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-08 10:05:07.341 00:00:00.026 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:05:07.458 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:00:54.290 00:06:00.188 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-08 10:01:53.736 00:05:00.477 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-08 10:02:53.426 00:05:01.011 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-08 10:02:53.686 00:05:00.557 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-08 10:02:53.442 00:05:00.986 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-08 10:01:55.071 00:06:00.182 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-08 10:02:54.302 00:06:00.127 TCP 28.153.0.1:179 -> 28.155.0.1:35531 14 861 1 2025-07-08 10:04:36.895 00:05:10.006 OSPF 28.0.3.1:0 -> 224.0.0.5:0 35 2436 1 2025-07-08 10:04:53.433 00:05:01.026 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-08 10:04:53.437 00:05:00.990 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-08 10:05:53.427 00:05:00.797 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-08 10:10:07.909 00:00:00.025 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:10:07.742 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:06:53.478 00:05:00.737 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-08 10:07:53.738 00:05:00.477 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-08 10:06:55.121 00:06:00.082 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-08 10:08:53.442 00:05:00.988 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-08 10:07:54.290 00:06:00.189 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-08 10:08:53.427 00:05:01.012 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-08 10:08:53.687 00:05:00.558 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-08 10:08:55.070 00:06:00.184 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-08 10:09:56.900 00:05:10.009 OSPF 28.0.3.1:0 -> 224.0.0.5:0 38 2748 1 2025-07-08 10:10:53.438 00:05:00.992 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-08 10:09:54.302 00:06:00.128 TCP 28.153.0.1:179 -> 28.155.0.1:35531 14 861 1 2025-07-08 10:10:53.434 00:05:01.027 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-08 10:15:07.486 00:00:00.026 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:15:07.794 00:00:00.012 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:11:53.428 00:05:00.798 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-08 10:12:53.479 00:05:00.737 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-08 10:13:53.742 00:05:00.474 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-08 10:13:55.124 00:06:00.081 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-08 10:14:53.429 00:05:01.013 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-08 10:14:53.688 00:05:00.560 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-08 10:14:53.445 00:05:00.988 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-08 10:15:16.909 00:05:10.007 OSPF 28.0.3.1:0 -> 224.0.0.5:0 49 3512 1 2025-07-08 10:14:54.292 00:06:00.190 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-08 10:20:07.767 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:20:07.543 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:16:53.439 00:05:00.994 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-08 10:15:55.075 00:06:00.181 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-08 10:16:53.436 00:05:01.027 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-08 10:17:53.429 00:05:00.798 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-08 10:16:54.303 00:06:00.130 TCP 28.153.0.1:179 -> 28.155.0.1:35531 14 861 1 2025-07-08 10:18:53.481 00:05:00.737 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-08 10:19:53.741 00:05:00.476 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-08 10:20:36.917 00:05:10.012 OSPF 28.0.3.1:0 -> 224.0.0.5:0 39 2712 1 2025-07-08 10:20:53.429 00:05:01.014 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-08 10:20:53.691 00:05:00.557 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-08 10:20:53.446 00:05:00.987 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-08 10:25:07.936 00:00:00.032 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:25:07.825 00:00:00.021 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:20:55.126 00:06:00.082 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-08 10:22:53.448 00:05:00.986 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-08 10:22:53.438 00:05:01.026 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-08 10:21:54.294 00:06:00.190 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-08 10:22:55.076 00:06:00.183 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-08 10:23:53.437 00:05:00.791 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-08 10:24:53.487 00:05:00.733 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-08 10:23:54.305 00:06:00.129 TCP 28.153.0.1:179 -> 28.155.0.1:35531 14 861 1 2025-07-08 10:25:53.742 00:05:00.479 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-08 10:25:56.929 00:05:10.004 OSPF 28.0.3.1:0 -> 224.0.0.5:0 34 2436 1 2025-07-08 10:30:07.984 00:00:00.024 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:30:08.200 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:26:53.450 00:05:00.985 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-08 10:26:53.437 00:05:01.007 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-08 10:26:53.692 00:05:00.559 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-08 10:27:55.129 00:06:00.080 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-08 10:28:53.440 00:05:01.025 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-08 10:28:53.447 00:05:00.987 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-08 10:29:53.438 00:05:00.792 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-08 10:28:54.296 00:06:00.189 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-08 10:30:53.491 00:05:00.731 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-08 10:29:55.080 00:06:00.181 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-08 10:35:07.971 00:00:00.021 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:35:08.334 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:31:16.934 00:05:10.012 OSPF 28.0.3.1:0 -> 224.0.0.5:0 32 2176 1 2025-07-08 10:30:54.307 00:06:00.129 TCP 28.153.0.1:179 -> 28.155.0.1:35531 14 861 1 2025-07-08 10:31:53.745 00:05:00.477 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-08 10:32:53.453 00:05:00.984 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-08 10:32:53.441 00:05:01.005 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-08 10:32:53.694 00:05:00.565 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-08 10:34:53.445 00:05:01.023 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-08 10:34:53.452 00:05:00.986 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-08 10:34:55.130 00:06:00.079 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-08 10:35:53.443 00:05:00.792 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-08 10:40:08.107 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:40:07.986 00:00:00.024 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:36:36.945 00:05:00.782 OSPF 28.0.3.1:0 -> 224.0.0.5:0 37 2592 1 2025-07-08 10:35:54.299 00:06:00.189 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-08 10:36:53.493 00:05:00.731 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-08 10:37:53.746 00:05:00.479 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-08 10:36:55.082 00:06:00.178 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-08 10:38:53.458 00:05:00.980 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-08 10:37:54.310 00:06:00.128 TCP 28.153.0.1:179 -> 28.155.0.1:35531 14 861 1 2025-07-08 10:38:53.444 00:05:01.004 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-08 10:38:53.695 00:05:00.560 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-08 10:40:53.448 00:05:01.020 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-08 10:40:53.454 00:05:00.984 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-08 10:45:08.232 00:00:00.024 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:45:08.178 00:00:00.021 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:41:53.445 00:05:00.793 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-08 10:41:46.958 00:05:10.007 OSPF 28.0.3.1:0 -> 224.0.0.5:0 44 3220 1 2025-07-08 10:42:53.495 00:05:00.733 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-08 10:41:55.131 00:06:00.079 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-08 10:43:53.747 00:05:00.481 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-08 10:42:54.303 00:06:00.185 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-08 10:44:53.459 00:05:00.979 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-08 10:43:55.083 00:06:00.180 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-08 10:44:53.445 00:05:01.005 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-08 10:44:53.697 00:05:00.564 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-08 10:44:54.314 00:06:00.126 TCP 28.153.0.1:179 -> 28.155.0.1:35531 14 861 1 2025-07-08 10:50:08.482 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:50:08.367 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:46:53.454 00:05:00.985 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-08 10:46:53.451 00:05:01.019 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-08 10:47:06.965 00:05:10.003 OSPF 28.0.3.1:0 -> 224.0.0.5:0 44 3196 1 2025-07-08 10:47:53.451 00:05:00.789 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-08 10:48:53.501 00:05:00.729 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-08 10:48:55.135 00:06:00.076 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-08 10:49:53.749 00:05:00.483 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-08 10:49:54.305 00:06:00.196 TCP 28.155.0.1:35531 -> 28.153.0.1:179 14 861 1 2025-07-08 10:50:53.451 00:05:01.010 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-08 10:50:53.698 00:05:00.564 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-08 10:50:53.464 00:05:00.987 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-08 10:55:08.545 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-08 10:55:08.583 00:00:00.024 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-08 10:50:55.086 00:06:00.177 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-08 10:52:26.969 00:05:10.003 OSPF 28.0.3.1:0 -> 224.0.0.5:0 35 2500 1 2025-07-08 10:52:53.454 00:05:01.028 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-08 10:52:53.461 00:05:00.990 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-08 10:51:54.315 00:06:00.136 TCP 28.153.0.1:179 -> 28.155.0.1:35531 14 861 1 2025-07-08 10:53:53.454 00:05:00.790 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 Summary: total flows: 150, total bytes: 124927, total packets: 1941, avg bps: 256, avg pps: 0, avg bpp: 64 Time window: 2025-07-08 09:53:54 - 2025-07-08 10:58:54 Total flows processed: 150, passed: 150, Blocks skipped: 0, Bytes read: 15664 Sys: 0.0022s User: 0.0011s Wall: 0.0015s flows/second: 103375.9 Runtime: 0.0015s