Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-15 08:54:58.134 00:06:00.509 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-15 08:55:57.777 00:05:00.943 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 08:55:57.768 00:05:01.003 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 08:55:56.880 00:05:01.105 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 08:56:56.890 00:05:01.831 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 08:56:56.623 00:05:02.107 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 08:56:58.084 00:06:00.609 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-15 08:58:56.880 00:05:01.871 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 08:58:56.633 00:05:02.087 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 08:59:01.386 00:05:10.005 OSPF 28.0.3.1:0 -> 224.0.0.5:0 40 2876 1 2025-07-15 09:03:28.449 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:03:28.489 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 08:59:56.623 00:05:01.342 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 08:59:56.674 00:05:01.281 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 08:59:56.931 00:05:01.024 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 09:01:57.769 00:05:01.003 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 09:01:56.881 00:05:01.105 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 09:01:57.780 00:05:00.942 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 09:02:56.624 00:05:02.111 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 09:02:56.892 00:05:01.834 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 09:01:58.135 00:06:00.512 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-15 09:04:21.392 00:05:10.006 OSPF 28.0.3.1:0 -> 224.0.0.5:0 43 3252 1 2025-07-15 09:08:28.538 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:08:28.574 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 09:04:56.634 00:05:02.091 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 09:03:58.085 00:06:00.613 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-15 09:04:56.882 00:05:01.874 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 09:05:56.628 00:05:01.340 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 09:05:56.678 00:05:01.280 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 09:05:56.932 00:05:01.026 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 09:07:57.782 00:05:00.944 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 09:07:57.772 00:05:01.004 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 09:07:56.882 00:05:01.105 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 09:08:56.625 00:05:02.111 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 09:08:56.892 00:05:01.834 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 09:13:28.650 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:13:28.746 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 09:09:41.397 00:05:10.004 OSPF 28.0.3.1:0 -> 224.0.0.5:0 39 2672 1 2025-07-15 09:08:58.135 00:06:00.513 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-15 09:10:56.635 00:05:02.093 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 09:10:56.883 00:05:01.876 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 09:11:56.676 00:05:01.281 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 09:11:56.933 00:05:01.024 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 09:10:58.087 00:06:00.612 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-15 09:11:56.626 00:05:01.342 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 09:13:56.885 00:05:01.105 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 09:13:57.774 00:05:01.006 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 09:13:57.784 00:05:00.946 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 09:18:28.727 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:18:28.857 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 09:14:56.895 00:05:01.835 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 09:14:56.629 00:05:02.111 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 09:15:01.401 00:05:10.006 OSPF 28.0.3.1:0 -> 224.0.0.5:0 33 2240 1 2025-07-15 09:16:56.640 00:05:02.091 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 09:15:58.138 00:06:00.513 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-15 09:16:56.885 00:05:01.875 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 09:17:56.679 00:05:01.280 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 09:17:56.936 00:05:01.023 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 09:17:56.629 00:05:01.340 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 09:17:58.087 00:06:00.614 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-15 09:23:28.787 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:23:28.977 00:00:00.025 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 09:19:57.775 00:05:01.006 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 09:19:56.886 00:05:01.104 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 09:19:57.786 00:05:00.945 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 09:20:21.407 00:05:10.005 OSPF 28.0.3.1:0 -> 224.0.0.5:0 40 2860 1 2025-07-15 09:20:56.630 00:05:02.110 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 09:20:56.897 00:05:01.834 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 09:22:56.886 00:05:01.876 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 09:22:56.642 00:05:02.092 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 09:23:56.681 00:05:01.279 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 09:23:56.936 00:05:01.024 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 09:22:58.138 00:06:00.516 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-15 09:23:56.630 00:05:01.339 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 09:28:29.496 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:28:29.135 00:00:00.027 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 09:25:41.413 00:05:10.005 OSPF 28.0.3.1:0 -> 224.0.0.5:0 37 2528 1 2025-07-15 09:25:57.788 00:05:00.947 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 09:24:58.091 00:06:00.614 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-15 09:25:57.779 00:05:01.007 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 09:25:56.888 00:05:01.103 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 09:26:56.896 00:05:01.839 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 09:26:56.631 00:05:02.115 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 09:28:56.641 00:05:02.095 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 09:28:56.890 00:05:01.877 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 09:33:29.008 00:00:00.024 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:33:29.051 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 09:29:56.632 00:05:01.341 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 09:29:56.682 00:05:01.280 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 09:29:56.940 00:05:01.022 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 09:29:58.141 00:06:00.516 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-15 09:31:01.418 00:05:10.044 OSPF 28.0.3.1:0 -> 224.0.0.5:0 44 3284 1 2025-07-15 09:31:57.792 00:05:00.945 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 09:31:57.783 00:05:01.006 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 09:31:56.892 00:05:01.103 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 09:31:58.091 00:06:00.617 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-15 09:32:56.633 00:05:02.114 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 09:32:56.900 00:05:01.837 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 09:38:29.325 00:00:00.021 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:38:29.185 00:00:00.021 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 09:34:56.891 00:05:01.878 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 09:34:56.644 00:05:02.095 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 09:35:56.633 00:05:01.340 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 09:35:56.683 00:05:01.280 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 09:35:56.941 00:05:01.022 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 09:36:21.421 00:05:10.004 OSPF 28.0.3.1:0 -> 224.0.0.5:0 38 2708 1 2025-07-15 09:36:58.141 00:06:00.520 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-15 09:37:57.792 00:05:00.946 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 09:37:57.783 00:05:01.006 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 09:37:56.891 00:05:01.103 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 09:38:56.633 00:05:02.116 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 09:38:56.902 00:05:01.838 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 09:43:29.144 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:43:29.095 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 09:38:58.091 00:06:00.621 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-15 09:40:56.893 00:05:01.876 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 09:40:56.644 00:05:02.095 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 09:41:41.424 00:05:10.003 OSPF 28.0.3.1:0 -> 224.0.0.5:0 37 2528 1 2025-07-15 09:41:56.683 00:05:01.281 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 09:41:56.942 00:05:01.022 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 09:41:56.634 00:05:01.341 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 09:43:57.794 00:05:00.945 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 09:43:57.785 00:05:01.006 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 09:43:56.894 00:05:01.102 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 09:48:29.248 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:48:29.389 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 09:44:56.904 00:05:01.836 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 09:43:58.144 00:06:00.519 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-15 09:44:56.634 00:05:02.115 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 09:46:56.894 00:05:01.877 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 09:45:58.094 00:06:00.619 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-15 09:46:56.644 00:05:02.096 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 09:47:01.427 00:05:10.006 OSPF 28.0.3.1:0 -> 224.0.0.5:0 36 2516 1 2025-07-15 09:47:56.685 00:05:01.283 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 09:47:56.945 00:05:01.023 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 09:47:56.635 00:05:01.343 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 09:53:29.557 00:00:00.023 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:53:29.593 00:00:00.023 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-07-15 09:49:57.786 00:05:01.006 TCP 28.155.0.1:35531 -> 28.153.0.1:179 12 738 1 2025-07-15 09:49:56.895 00:05:01.105 TCP 28.152.0.1:37913 -> 28.158.0.1:179 12 738 1 2025-07-15 09:49:57.796 00:05:00.946 TCP 28.153.0.1:179 -> 28.155.0.1:35531 12 738 1 2025-07-15 09:50:56.635 00:05:02.116 TCP 28.151.0.1:179 -> 28.153.0.1:43461 12 738 1 2025-07-15 09:50:56.905 00:05:01.836 TCP 28.153.0.1:45261 -> 28.152.0.1:179 12 738 1 2025-07-15 09:50:58.144 00:06:00.519 TCP 28.158.0.1:45047 -> 28.155.0.1:179 14 861 1 2025-07-15 09:52:21.433 00:05:10.014 OSPF 28.0.3.1:0 -> 224.0.0.5:0 39 2728 1 2025-07-15 09:52:56.896 00:05:01.876 TCP 28.152.0.1:179 -> 28.153.0.1:45261 12 738 1 2025-07-15 09:52:56.645 00:05:02.096 TCP 28.153.0.1:43461 -> 28.151.0.1:179 12 738 1 2025-07-15 09:53:56.636 00:05:01.347 TCP 28.151.0.1:33867 -> 28.158.0.1:179 12 738 1 2025-07-15 09:52:58.095 00:06:00.619 TCP 28.155.0.1:179 -> 28.158.0.1:45047 14 861 1 2025-07-15 09:53:56.686 00:05:01.286 TCP 28.158.0.1:179 -> 28.151.0.1:33867 12 738 1 2025-07-15 09:53:56.946 00:05:01.026 TCP 28.158.0.1:179 -> 28.152.0.1:37913 12 738 1 2025-07-15 09:58:29.440 00:00:00.022 ICMP 30.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-07-15 09:58:29.528 00:00:00.022 ICMP 30.107.0.1:0 -> 24.0.198.2:0.0 3 252 1 Summary: total flows: 153, total bytes: 125538, total packets: 1950, avg bps: 261, avg pps: 0, avg bpp: 64 Time window: 2025-07-15 08:54:58 - 2025-07-15 09:58:58 Total flows processed: 153, passed: 153, Blocks skipped: 0, Bytes read: 15976 Sys: 0.0020s User: 0.0020s Wall: 0.0018s flows/second: 85427.1 Runtime: 0.0018s