Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-13 02:53:57.209 00:06:00.213 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-13 02:55:55.803 00:05:01.031 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-13 02:54:57.158 00:06:00.314 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-13 02:56:55.811 00:05:01.434 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-13 02:56:55.611 00:05:01.644 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-13 02:57:56.673 00:05:00.572 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-13 03:02:23.423 00:00:00.025 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:02:23.311 00:00:00.021 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 02:58:55.801 00:05:01.475 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-13 02:58:55.851 00:05:00.953 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-13 02:58:55.620 00:05:01.625 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-13 02:59:36.985 00:05:10.008 OSPF 28.0.3.1:0 -> 224.0.0.5:0 34 2372 1 2025-07-13 02:59:55.611 00:05:01.203 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-13 02:59:56.664 00:05:00.632 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-13 02:59:55.662 00:05:01.143 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-13 03:01:55.803 00:05:01.032 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-13 03:00:57.210 00:06:00.215 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-13 03:02:55.818 00:05:01.429 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-13 03:01:57.159 00:06:00.315 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-13 03:02:55.611 00:05:01.645 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-13 03:07:23.484 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:07:23.607 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:03:56.675 00:05:00.571 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-13 03:04:55.859 00:05:00.946 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-13 03:04:56.994 00:05:00.020 OSPF 28.0.3.1:0 -> 224.0.0.5:0 34 2332 1 2025-07-13 03:04:55.808 00:05:01.469 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-13 03:04:55.622 00:05:01.626 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-13 03:05:55.612 00:05:01.203 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-13 03:05:55.661 00:05:01.143 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-13 03:05:56.667 00:05:00.631 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-13 03:07:55.809 00:05:01.026 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-13 03:12:24.059 00:00:00.021 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:12:23.971 00:00:00.024 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:08:55.612 00:05:01.646 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-13 03:08:55.819 00:05:01.429 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-13 03:07:57.211 00:06:00.216 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-13 03:08:57.160 00:06:00.317 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-13 03:09:56.678 00:05:00.570 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-13 03:10:05.389 00:05:01.620 OSPF 28.0.3.1:0 -> 224.0.0.5:0 44 3256 1 2025-07-13 03:10:55.859 00:05:00.949 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-13 03:10:55.622 00:05:01.634 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-13 03:10:55.810 00:05:01.478 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-13 03:11:55.663 00:05:01.144 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-13 03:11:55.613 00:05:01.205 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-13 03:11:56.669 00:05:00.638 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-13 03:17:23.727 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:17:23.723 00:00:00.021 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:13:55.816 00:05:01.022 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-13 03:14:55.613 00:05:01.654 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-13 03:14:55.827 00:05:01.430 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-13 03:15:17.008 00:05:10.035 OSPF 28.0.3.1:0 -> 224.0.0.5:0 45 3220 1 2025-07-13 03:14:57.212 00:06:00.218 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-13 03:15:56.681 00:05:00.578 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-13 03:16:55.875 00:05:00.935 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-13 03:16:55.624 00:05:01.635 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-13 03:15:57.161 00:06:00.318 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-13 03:16:55.824 00:05:01.465 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-13 03:17:55.614 00:05:01.207 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-13 03:17:56.670 00:05:00.639 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-13 03:17:55.663 00:05:01.147 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-13 03:22:23.615 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:22:23.686 00:00:00.024 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:19:55.820 00:05:01.022 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-13 03:20:37.045 00:05:10.005 OSPF 28.0.3.1:0 -> 224.0.0.5:0 35 2500 1 2025-07-13 03:20:55.830 00:05:01.430 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-13 03:20:55.615 00:05:01.654 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-13 03:21:56.681 00:05:00.579 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-13 03:22:55.872 00:05:00.940 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-13 03:22:55.626 00:05:01.634 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-13 03:21:57.211 00:06:00.219 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-13 03:22:55.821 00:05:01.469 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-13 03:27:24.053 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:27:23.944 00:00:00.024 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:22:57.161 00:06:00.319 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-13 03:23:55.615 00:05:01.207 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-13 03:23:56.672 00:05:00.639 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-13 03:23:55.665 00:05:01.147 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-13 03:25:55.822 00:05:01.021 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-13 03:25:57.050 00:05:10.014 OSPF 28.0.3.1:0 -> 224.0.0.5:0 33 2240 1 2025-07-13 03:26:55.615 00:05:01.658 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-13 03:26:55.834 00:05:01.430 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-13 03:27:56.683 00:05:00.581 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-13 03:32:24.356 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:32:24.064 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:28:55.822 00:05:01.472 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-13 03:28:55.873 00:05:00.943 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-13 03:28:55.626 00:05:01.638 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-13 03:29:55.620 00:05:01.207 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-13 03:29:56.674 00:05:00.642 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-13 03:29:55.669 00:05:01.147 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-13 03:28:57.212 00:06:00.226 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-13 03:29:57.162 00:06:00.327 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-13 03:31:17.064 00:05:10.015 OSPF 28.0.3.1:0 -> 224.0.0.5:0 36 2516 1 2025-07-13 03:31:55.824 00:05:01.024 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-13 03:32:55.620 00:05:01.655 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-13 03:32:55.834 00:05:01.432 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-13 03:37:24.022 00:00:00.020 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:37:23.849 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:33:56.684 00:05:00.583 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-13 03:34:55.875 00:05:00.943 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-13 03:34:55.824 00:05:01.472 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-13 03:34:55.631 00:05:01.635 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-13 03:35:55.622 00:05:01.207 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-13 03:35:56.674 00:05:00.643 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-13 03:35:55.672 00:05:01.147 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-13 03:36:37.078 00:05:10.010 OSPF 28.0.3.1:0 -> 224.0.0.5:0 42 3076 1 2025-07-13 03:35:57.213 00:06:00.226 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-13 03:37:55.827 00:05:01.023 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-13 03:36:57.163 00:06:00.327 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-13 03:42:24.263 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:42:24.234 00:00:00.038 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:38:55.622 00:05:01.659 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-13 03:38:55.834 00:05:01.437 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-13 03:39:56.687 00:05:00.582 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-13 03:40:55.825 00:05:01.474 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-13 03:40:55.875 00:05:00.945 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-13 03:40:55.633 00:05:01.636 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-13 03:41:55.673 00:05:01.147 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-13 03:41:53.571 00:05:03.521 OSPF 28.0.3.1:0 -> 224.0.0.5:0 41 2984 1 2025-07-13 03:41:55.622 00:05:01.207 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-13 03:41:56.677 00:05:00.642 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-13 03:47:24.264 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:47:24.307 00:00:00.020 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:43:55.826 00:05:01.024 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-13 03:42:57.218 00:06:00.223 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-13 03:43:57.168 00:06:00.324 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-13 03:44:55.625 00:05:01.657 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-13 03:44:55.835 00:05:01.436 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-13 03:45:56.689 00:05:00.582 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-13 03:46:55.826 00:05:01.475 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-13 03:46:55.878 00:05:00.944 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-13 03:46:55.636 00:05:01.637 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-13 03:47:07.093 00:05:10.008 OSPF 28.0.3.1:0 -> 224.0.0.5:0 41 2932 1 2025-07-13 03:47:55.675 00:05:01.146 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-13 03:47:55.627 00:05:01.205 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-13 03:47:56.681 00:05:00.643 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-13 03:52:24.455 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:52:24.495 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:49:55.827 00:05:01.024 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-13 03:50:55.837 00:05:01.436 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-13 03:49:57.218 00:06:00.225 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-13 03:50:55.625 00:05:01.658 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-13 03:50:57.179 00:06:00.314 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-13 03:51:56.692 00:05:00.583 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-13 03:52:27.101 00:05:10.005 OSPF 28.0.3.1:0 -> 224.0.0.5:0 33 2240 1 2025-07-13 03:52:55.827 00:05:01.477 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-13 03:52:55.878 00:05:00.944 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-13 03:52:55.636 00:05:01.638 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-13 03:57:24.617 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-13 03:57:24.573 00:00:00.021 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-13 03:53:55.625 00:05:01.207 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-13 03:53:56.680 00:05:00.646 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-13 03:53:55.677 00:05:01.147 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 Summary: total flows: 153, total bytes: 125014, total packets: 1942, avg bps: 256, avg pps: 0, avg bpp: 64 Time window: 2025-07-13 02:53:57 - 2025-07-13 03:58:57 Total flows processed: 153, passed: 153, Blocks skipped: 0, Bytes read: 15976 Sys: 0.0026s User: 0.0017s Wall: 0.0028s flows/second: 55235.7 Runtime: 0.0028s