Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 16:00:32.360 00:00:00.024 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:00:32.362 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 15:57:04.229 00:04:00.527 TCP 179.27.28.28:179 -> 179.27.28.27:53088 10 615 1 2025-11-10 15:59:04.232 00:04:00.524 TCP 179.27.28.27:53088 -> 179.27.28.28:179 10 615 1 2025-11-10 16:04:04.232 00:01:00.523 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-10 16:05:32.463 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:05:32.465 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:02:04.230 00:04:00.530 TCP 179.27.28.28:179 -> 179.27.28.27:53088 10 615 1 2025-11-10 16:06:04.231 00:02:00.526 TCP 179.27.28.27:53088 -> 179.27.28.28:179 6 369 1 2025-11-10 16:09:04.235 00:01:00.524 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-10 16:10:33.037 00:00:00.037 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:10:33.040 00:00:00.036 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:07:04.229 00:04:00.531 TCP 179.27.28.28:179 -> 179.27.28.27:53088 10 615 1 2025-11-10 16:11:04.234 00:02:00.524 TCP 179.27.28.27:53088 -> 179.27.28.28:179 6 369 1 2025-11-10 16:14:04.234 00:01:00.524 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-10 16:15:32.750 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:15:32.747 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:12:04.231 00:04:00.529 TCP 179.27.28.28:179 -> 179.27.28.27:53088 10 615 1 2025-11-10 16:17:04.233 00:01:00.529 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-10 16:16:04.236 00:04:00.525 TCP 179.27.28.27:53088 -> 179.27.28.28:179 10 615 1 2025-11-10 16:20:33.312 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:20:33.314 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:19:04.234 00:02:00.528 TCP 179.27.28.28:179 -> 179.27.28.27:53088 6 369 1 2025-11-10 16:22:04.235 00:01:00.528 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-10 16:21:04.239 00:04:00.522 TCP 179.27.28.27:53088 -> 179.27.28.28:179 10 615 1 2025-11-10 16:25:33.689 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:25:33.692 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:24:04.236 00:04:00.527 TCP 179.27.28.28:179 -> 179.27.28.27:53088 10 615 1 2025-11-10 16:26:04.241 00:04:00.521 TCP 179.27.28.27:53088 -> 179.27.28.28:179 10 615 1 2025-11-10 16:30:33.013 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:30:33.010 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:29:04.237 00:04:00.527 TCP 179.27.28.28:179 -> 179.27.28.27:53088 10 615 1 2025-11-10 16:31:04.240 00:04:00.521 TCP 179.27.28.27:53088 -> 179.27.28.28:179 10 615 1 2025-11-10 16:35:33.336 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:35:33.338 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:36:04.241 00:01:00.521 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-10 16:34:04.239 00:04:00.526 TCP 179.27.28.28:179 -> 179.27.28.27:53088 10 615 1 2025-11-10 16:38:04.241 00:02:00.522 TCP 179.27.28.27:53088 -> 179.27.28.28:179 6 369 1 2025-11-10 16:40:33.234 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:40:33.237 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:41:04.242 00:01:00.522 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-10 16:39:04.239 00:04:00.527 TCP 179.27.28.28:179 -> 179.27.28.27:53088 10 615 1 2025-11-10 16:44:04.266 00:01:00.500 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-10 16:43:04.269 00:02:00.495 TCP 179.27.28.27:53088 -> 179.27.28.28:179 6 369 1 2025-11-10 16:45:33.568 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:45:33.566 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:46:04.271 00:01:00.495 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-10 16:46:04.266 00:02:00.501 TCP 179.27.28.28:179 -> 179.27.28.27:53088 6 369 1 2025-11-10 16:49:04.268 00:01:00.503 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-10 16:48:04.271 00:02:00.498 TCP 179.27.28.27:53088 -> 179.27.28.28:179 6 369 1 2025-11-10 16:50:33.362 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:50:33.365 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:51:04.271 00:01:00.499 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-10 16:51:04.268 00:02:00.503 TCP 179.27.28.28:179 -> 179.27.28.27:53088 6 369 1 2025-11-10 16:54:04.268 00:01:00.503 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-10 16:55:33.381 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-10 16:55:33.379 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-10 16:53:04.271 00:04:00.498 TCP 179.27.28.27:53088 -> 179.27.28.28:179 10 615 1 2025-11-10 16:56:04.269 00:02:00.503 TCP 179.27.28.28:179 -> 179.27.28.27:53088 6 369 1 Summary: total flows: 59, total bytes: 20931, total packets: 314, avg bps: 45, avg pps: 0, avg bpp: 66 Time window: 2025-11-10 15:57:04 - 2025-11-10 16:58:04 Total flows processed: 59, passed: 59, Blocks skipped: 0, Bytes read: 6200 Sys: 0.0045s User: 0.0009s Wall: 0.0018s flows/second: 32416.0 Runtime: 0.0018s