Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 23:58:23.502 00:01:00.136 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-01 23:58:23.540 00:01:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-01 23:58:23.481 00:01:00.216 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-01 23:56:59.405 00:05:10.007 OSPF 28.0.7.2:0 -> 224.0.0.5:0 38 2728 1 2025-09-02 00:00:23.509 00:01:00.129 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:00:23.539 00:01:00.099 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:00:23.490 00:01:00.208 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:01:53.080 00:00:00.027 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:02:23.510 00:00:00.128 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-09-02 00:02:23.540 00:00:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-02 00:02:23.490 00:00:00.208 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-01 23:59:21.699 00:05:01.959 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-02 00:03:23.489 00:01:00.209 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:03:23.510 00:01:00.128 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:03:23.540 00:01:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:00:21.719 00:05:01.919 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-02 00:05:23.491 00:01:00.208 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:05:23.510 00:01:00.128 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:05:23.540 00:01:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:02:19.413 00:05:10.001 OSPF 28.0.7.2:0 -> 224.0.0.5:0 36 2448 1 2025-09-02 00:06:53.113 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:07:23.511 00:00:00.128 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-09-02 00:07:23.541 00:00:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-02 00:08:23.511 00:01:00.127 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:08:23.540 00:01:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:07:23.491 00:02:00.209 TCP 28.156.0.1:37457 -> 28.155.0.1:179 6 369 1 2025-09-02 00:05:21.700 00:05:01.960 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-02 00:06:21.720 00:05:01.923 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-02 00:10:23.512 00:01:00.131 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:10:23.541 00:01:00.102 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:10:23.491 00:01:00.212 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:11:53.179 00:00:00.041 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:07:39.415 00:05:10.516 OSPF 28.0.7.2:0 -> 224.0.0.5:0 39 2704 1 2025-09-02 00:12:23.512 00:00:00.129 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-09-02 00:12:23.543 00:00:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-02 00:12:23.492 00:02:00.209 TCP 28.156.0.1:37457 -> 28.155.0.1:179 6 369 1 2025-09-02 00:13:23.513 00:01:00.128 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:13:23.542 00:01:00.099 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:11:21.701 00:05:01.961 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-02 00:15:23.493 00:01:00.209 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:15:23.513 00:01:00.129 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:15:23.548 00:01:00.094 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:12:21.721 00:05:01.921 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-02 00:16:53.416 00:00:00.021 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:12:59.418 00:05:10.002 OSPF 28.0.7.2:0 -> 224.0.0.5:0 36 2544 1 2025-09-02 00:17:23.515 00:00:00.128 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-09-02 00:17:23.545 00:00:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-02 00:17:23.494 00:02:00.218 TCP 28.156.0.1:37457 -> 28.155.0.1:179 6 369 1 2025-09-02 00:18:23.515 00:01:00.128 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:18:23.544 00:01:00.099 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:20:23.495 00:01:00.208 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:20:23.514 00:01:00.128 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:20:23.543 00:01:00.099 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:17:21.702 00:05:01.960 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-02 00:21:53.520 00:00:00.024 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:22:23.545 00:00:00.097 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-02 00:18:21.724 00:05:01.919 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-02 00:18:19.421 00:05:10.004 OSPF 28.0.7.2:0 -> 224.0.0.5:0 34 2444 1 2025-09-02 00:22:23.495 00:01:00.208 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:24:23.495 00:00:00.208 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-02 00:22:23.516 00:02:00.128 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-09-02 00:23:23.546 00:01:00.097 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:25:23.496 00:01:00.208 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:25:23.516 00:01:00.128 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:25:23.546 00:01:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:26:53.717 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:23:21.705 00:05:01.958 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-02 00:23:39.425 00:05:00.781 OSPF 28.0.7.2:0 -> 224.0.0.5:0 35 2476 1 2025-09-02 00:27:23.496 00:01:00.207 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:24:21.725 00:05:01.919 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-02 00:27:23.518 00:02:00.127 TCP 28.155.0.1:179 -> 28.156.0.1:37457 6 369 1 2025-09-02 00:27:23.547 00:02:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 6 369 1 2025-09-02 00:29:23.497 00:00:00.206 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-02 00:30:23.497 00:01:00.207 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:30:23.546 00:01:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:30:23.517 00:01:00.127 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:31:54.073 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:28:49.429 00:05:10.025 OSPF 28.0.7.2:0 -> 224.0.0.5:0 37 2648 1 2025-09-02 00:32:23.500 00:01:00.205 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:32:23.521 00:01:00.124 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:32:23.547 00:01:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:29:21.706 00:05:01.959 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-02 00:34:23.498 00:00:00.207 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-02 00:34:23.517 00:00:00.127 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-09-02 00:34:23.547 00:00:00.097 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-02 00:30:21.726 00:05:01.919 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-02 00:35:23.518 00:01:00.126 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:35:23.547 00:01:00.097 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:35:23.498 00:01:00.206 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:36:53.855 00:00:00.020 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:37:23.522 00:01:00.123 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:37:23.548 00:01:00.097 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:34:09.441 00:05:10.007 OSPF 28.0.7.2:0 -> 224.0.0.5:0 38 2624 1 2025-09-02 00:37:23.503 00:01:00.204 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:39:23.520 00:00:00.127 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-09-02 00:39:23.549 00:00:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-02 00:39:23.500 00:00:00.207 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-02 00:35:21.707 00:05:01.960 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-02 00:36:21.728 00:05:01.919 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-02 00:40:23.519 00:01:00.127 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:40:23.548 00:01:00.098 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:40:23.498 00:01:00.208 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:41:53.881 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:42:23.550 00:01:00.097 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:42:23.526 00:01:00.121 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:42:23.506 00:01:00.201 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:39:29.449 00:05:10.005 OSPF 28.0.7.2:0 -> 224.0.0.5:0 37 2568 1 2025-09-02 00:44:23.521 00:00:00.125 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-09-02 00:44:23.550 00:00:00.096 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-02 00:41:21.709 00:05:01.974 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-02 00:44:23.502 00:02:00.221 TCP 28.156.0.1:37457 -> 28.155.0.1:179 6 369 1 2025-09-02 00:45:23.522 00:01:00.132 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:45:23.552 00:01:00.102 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:42:21.728 00:05:01.925 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-02 00:46:53.935 00:00:00.022 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:47:23.503 00:01:00.209 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:47:23.523 00:01:00.130 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:47:23.552 00:01:00.101 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:44:49.454 00:05:10.005 OSPF 28.0.7.2:0 -> 224.0.0.5:0 33 2296 1 2025-09-02 00:49:23.526 00:00:00.127 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-09-02 00:49:23.552 00:00:00.101 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-02 00:50:23.526 00:01:00.127 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:50:23.552 00:01:00.101 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:49:23.507 00:02:00.213 TCP 28.156.0.1:37457 -> 28.155.0.1:179 6 369 1 2025-09-02 00:47:21.712 00:05:01.962 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-02 00:51:54.128 00:00:00.023 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:48:21.731 00:05:01.922 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 2025-09-02 00:52:23.508 00:01:00.206 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:52:23.527 00:01:00.127 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:52:23.552 00:01:00.102 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:54:23.537 00:00:00.117 TCP 28.155.0.1:179 -> 28.156.0.1:37457 2 123 1 2025-09-02 00:54:23.553 00:00:00.101 TCP 28.155.0.1:36643 -> 28.154.0.1:179 2 123 1 2025-09-02 00:50:09.460 00:05:10.007 OSPF 28.0.7.2:0 -> 224.0.0.5:0 35 2524 1 2025-09-02 00:54:23.518 00:01:00.199 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:56:23.517 00:00:00.198 TCP 28.156.0.1:37457 -> 28.155.0.1:179 2 123 1 2025-09-02 00:55:23.538 00:01:00.118 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:55:23.554 00:01:00.102 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:56:54.169 00:00:00.049 ICMP 29.107.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-02 00:53:21.714 00:05:01.961 TCP 28.152.0.1:179 -> 28.155.0.1:36663 12 738 1 2025-09-02 00:57:23.537 00:01:00.118 TCP 28.155.0.1:179 -> 28.156.0.1:37457 4 246 1 2025-09-02 00:57:23.553 00:01:00.102 TCP 28.155.0.1:36643 -> 28.154.0.1:179 4 246 1 2025-09-02 00:57:23.518 00:01:00.198 TCP 28.156.0.1:37457 -> 28.155.0.1:179 4 246 1 2025-09-02 00:54:21.735 00:05:01.920 TCP 28.155.0.1:36663 -> 28.152.0.1:179 12 738 1 Summary: total flows: 143, total bytes: 68297, total packets: 1040, avg bps: 145, avg pps: 0, avg bpp: 65 Time window: 2025-09-01 23:56:59 - 2025-09-02 00:59:23 Total flows processed: 143, passed: 143, Blocks skipped: 0, Bytes read: 14936 Sys: 0.0032s User: 0.0011s Wall: 0.0020s flows/second: 71710.4 Runtime: 0.0020s