Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-15 01:55:57.964 00:05:00.539 TCP 28.158.0.1:45047 -> 28.155.0.1:179 12 738 1 2025-07-15 01:55:57.619 00:05:00.935 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 01:55:57.609 00:05:00.995 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 01:55:56.747 00:05:01.101 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 01:56:56.757 00:05:01.791 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 01:56:57.914 00:05:00.639 TCP 28.155.0.1:179 -> 28.158.0.1:45047 12 738 1 2025-07-15 01:56:56.507 00:05:02.050 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 01:58:56.747 00:05:01.831 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 01:58:56.518 00:05:02.031 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 02:03:20.091 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:03:19.875 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 01:59:48.462 00:05:02.376 OSPF 28.0.3.1:0 -> 224.0.0.5:0 40 2864 1 2025-07-15 01:59:56.508 00:05:01.321 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 01:59:56.557 00:05:01.261 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 01:59:56.797 00:05:01.021 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 02:01:57.616 00:05:00.983 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 02:01:56.748 00:05:01.104 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 02:01:57.965 00:05:00.541 TCP 28.158.0.1:45047 -> 28.155.0.1:179 12 738 1 2025-07-15 02:01:57.627 00:05:00.922 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 02:02:57.915 00:05:00.642 TCP 28.155.0.1:179 -> 28.158.0.1:45047 12 738 1 2025-07-15 02:02:56.508 00:05:02.050 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 02:02:56.758 00:05:01.790 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 02:08:19.898 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:08:19.933 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:04:56.750 00:05:01.828 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 02:04:56.518 00:05:02.030 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 02:05:00.839 00:05:10.010 OSPF 28.0.3.1:0 -> 224.0.0.5:0 33 2240 1 2025-07-15 02:05:56.509 00:05:01.324 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 02:05:56.559 00:05:01.264 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 02:05:56.801 00:05:01.022 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 02:07:57.616 00:05:00.996 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 02:07:56.750 00:05:01.103 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 02:07:57.971 00:05:00.537 TCP 28.158.0.1:45047 -> 28.155.0.1:179 12 738 1 2025-07-15 02:07:57.628 00:05:00.923 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 02:08:57.920 00:05:00.638 TCP 28.155.0.1:179 -> 28.158.0.1:45047 12 738 1 2025-07-15 02:08:56.512 00:05:02.049 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 02:08:56.760 00:05:01.790 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 02:13:20.145 00:00:00.021 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:13:20.277 00:00:00.021 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:10:20.847 00:05:10.007 OSPF 28.0.3.1:0 -> 224.0.0.5:0 38 2660 1 2025-07-15 02:10:56.752 00:05:01.829 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 02:10:56.522 00:05:02.029 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 02:11:56.512 00:05:01.323 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 02:11:56.562 00:05:01.263 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 02:11:56.801 00:05:01.024 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 02:13:57.618 00:05:00.984 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 02:13:56.752 00:05:01.104 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 02:13:57.972 00:05:00.538 TCP 28.158.0.1:45047 -> 28.155.0.1:179 12 738 1 2025-07-15 02:13:57.629 00:05:00.923 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 02:18:20.312 00:00:00.024 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:18:20.318 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:14:57.922 00:05:00.638 TCP 28.155.0.1:179 -> 28.158.0.1:45047 12 738 1 2025-07-15 02:14:56.513 00:05:02.049 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 02:14:56.762 00:05:01.790 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 02:15:40.854 00:05:10.011 OSPF 28.0.3.1:0 -> 224.0.0.5:0 37 2584 1 2025-07-15 02:16:56.523 00:05:02.030 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 02:16:56.753 00:05:01.831 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 02:17:56.513 00:05:01.322 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 02:17:56.563 00:05:01.263 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 02:17:56.802 00:05:01.024 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 02:23:20.381 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:23:20.540 00:00:00.024 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:19:57.621 00:05:00.982 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 02:19:56.753 00:05:01.105 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 02:19:57.973 00:05:00.540 TCP 28.158.0.1:45047 -> 28.155.0.1:179 12 738 1 2025-07-15 02:19:57.631 00:05:00.922 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 02:20:56.513 00:05:02.051 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 02:20:57.923 00:05:00.641 TCP 28.155.0.1:179 -> 28.158.0.1:45047 12 738 1 2025-07-15 02:20:56.762 00:05:01.791 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 02:21:00.866 00:05:10.005 OSPF 28.0.3.1:0 -> 224.0.0.5:0 45 3348 1 2025-07-15 02:22:56.525 00:05:02.029 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 02:22:56.753 00:05:01.831 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 02:23:56.513 00:05:01.326 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 02:23:56.565 00:05:01.265 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 02:23:56.804 00:05:01.026 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 02:28:21.185 00:00:00.049 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:28:21.163 00:00:00.021 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:25:57.973 00:05:00.544 TCP 28.158.0.1:45047 -> 28.155.0.1:179 12 738 1 2025-07-15 02:25:57.632 00:05:00.922 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 02:25:57.622 00:05:00.983 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 02:25:56.754 00:05:01.107 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 02:26:20.870 00:05:10.006 OSPF 28.0.3.1:0 -> 224.0.0.5:0 38 2724 1 2025-07-15 02:26:56.767 00:05:01.788 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 02:26:56.515 00:05:02.051 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 02:26:57.925 00:05:00.644 TCP 28.155.0.1:179 -> 28.158.0.1:45047 12 738 1 2025-07-15 02:28:56.755 00:05:01.831 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 02:28:56.524 00:05:02.031 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 02:33:20.440 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:33:20.325 00:00:00.024 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:29:56.515 00:05:01.330 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 02:29:56.565 00:05:01.270 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 02:29:56.806 00:05:01.029 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 02:31:40.877 00:05:10.014 OSPF 28.0.3.1:0 -> 224.0.0.5:0 36 2464 1 2025-07-15 02:31:57.974 00:05:00.545 TCP 28.158.0.1:45047 -> 28.155.0.1:179 12 738 1 2025-07-15 02:31:57.633 00:05:00.924 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 02:31:57.624 00:05:00.984 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 02:31:56.756 00:05:01.108 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 02:32:56.766 00:05:01.792 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 02:32:57.925 00:05:00.645 TCP 28.155.0.1:179 -> 28.158.0.1:45047 12 738 1 2025-07-15 02:32:56.519 00:05:02.049 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 02:38:20.510 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:38:20.745 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:34:56.757 00:05:01.831 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 02:34:56.529 00:05:02.030 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 02:35:56.567 00:05:01.267 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 02:35:56.807 00:05:01.027 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 02:35:56.518 00:05:01.326 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 02:37:00.892 00:05:10.003 OSPF 28.0.3.1:0 -> 224.0.0.5:0 34 2372 1 2025-07-15 02:37:57.633 00:05:00.981 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 02:37:56.760 00:05:01.106 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 02:37:57.977 00:05:00.548 TCP 28.158.0.1:45047 -> 28.155.0.1:179 12 738 1 2025-07-15 02:37:57.644 00:05:00.918 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 02:38:57.926 00:05:00.648 TCP 28.155.0.1:179 -> 28.158.0.1:45047 12 738 1 2025-07-15 02:38:56.520 00:05:02.051 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 02:38:56.770 00:05:01.790 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 02:43:20.863 00:00:00.021 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:43:20.909 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:40:56.531 00:05:02.031 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 02:40:56.760 00:05:01.832 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 02:41:56.571 00:05:01.265 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 02:41:56.810 00:05:01.026 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 02:41:56.520 00:05:01.325 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 02:42:20.894 00:05:10.005 OSPF 28.0.3.1:0 -> 224.0.0.5:0 38 2664 1 2025-07-15 02:43:57.633 00:05:00.979 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 02:43:56.760 00:05:01.106 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 02:43:57.978 00:05:00.547 TCP 28.158.0.1:45047 -> 28.155.0.1:179 12 738 1 2025-07-15 02:43:57.643 00:05:00.919 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 02:48:20.820 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:48:20.802 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:44:56.771 00:05:01.793 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 02:44:57.928 00:05:00.647 TCP 28.155.0.1:179 -> 28.158.0.1:45047 12 738 1 2025-07-15 02:44:56.520 00:05:02.053 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 02:46:56.760 00:05:01.833 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 02:46:56.530 00:05:02.033 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 02:47:40.900 00:05:10.161 OSPF 28.0.3.1:0 -> 224.0.0.5:0 44 3228 1 2025-07-15 02:47:56.522 00:05:01.324 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 02:47:56.573 00:05:01.264 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 02:47:56.812 00:05:01.025 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 02:53:20.966 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:53:21.091 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 02:49:57.634 00:05:00.980 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 02:49:56.764 00:05:01.102 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 02:49:57.982 00:05:00.544 TCP 28.158.0.1:45047 -> 28.155.0.1:179 12 738 1 2025-07-15 02:49:57.644 00:05:00.920 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 02:50:57.931 00:05:00.647 TCP 28.155.0.1:179 -> 28.158.0.1:45047 12 738 1 2025-07-15 02:50:56.523 00:05:02.051 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 02:50:56.774 00:05:01.790 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 02:52:56.534 00:05:02.034 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 02:52:56.766 00:05:01.833 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 02:53:00.903 00:05:10.005 OSPF 28.0.3.1:0 -> 224.0.0.5:0 40 2908 1 2025-07-15 02:53:56.574 00:05:01.264 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 02:53:56.816 00:05:01.022 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 02:53:56.523 00:05:01.324 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 02:58:21.054 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 02:58:21.084 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 Summary: total flows: 155, total bytes: 124664, total packets: 1935, avg bps: 263, avg pps: 0, avg bpp: 64 Time window: 2025-07-15 01:55:56 - 2025-07-15 02:58:57 Total flows processed: 155, passed: 155, Blocks skipped: 0, Bytes read: 16184 Sys: 0.0030s User: 0.0010s Wall: 0.0021s flows/second: 72777.0 Runtime: 0.0022s