Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 07:58:09.895 00:01:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 07:58:09.890 00:01:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:00:09.890 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:00:09.895 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:00:11.523 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:00:11.520 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:01:09.890 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:01:09.895 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:02:09.896 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:02:09.890 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:03:09.895 00:01:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 08:03:09.894 00:01:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:05:09.899 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:05:09.894 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:05:11.916 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:05:11.913 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:06:09.894 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:06:09.897 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:07:09.899 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:07:09.895 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:08:09.895 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:08:09.897 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 08:09:09.895 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:10:09.895 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:10:09.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:10:11.682 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:10:11.685 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:11:09.894 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:11:09.900 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:12:09.895 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:12:09.899 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:13:09.896 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:14:09.896 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:13:09.899 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 08:15:09.898 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:15:09.896 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:15:11.791 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:15:11.788 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:16:09.898 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:16:09.900 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:17:09.900 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:17:09.897 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:18:09.897 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:18:09.901 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:19:09.902 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:19:09.898 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:20:09.898 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:20:09.902 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:20:11.755 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:20:11.753 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:21:09.903 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:21:09.898 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:22:09.898 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:22:09.903 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:23:09.899 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:23:09.903 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:24:09.898 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:24:09.903 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:25:09.903 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:25:12.298 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:25:12.301 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:26:09.903 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:25:09.898 00:01:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:27:09.899 00:00:00.009 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:27:09.906 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:28:09.904 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:28:09.899 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:29:09.901 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:29:09.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:30:09.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:30:12.233 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:30:12.230 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:30:09.900 00:01:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:31:09.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:32:09.900 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:32:09.906 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:33:09.906 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:33:09.901 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:34:09.901 00:00:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:34:09.905 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:35:12.285 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:35:12.288 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:35:09.900 00:01:00.008 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 08:35:09.906 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 08:37:09.902 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:37:09.908 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:38:09.906 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:38:09.902 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:39:09.902 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:39:09.906 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:40:09.902 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:40:12.019 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:40:12.022 00:00:00.020 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:41:09.902 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:40:09.907 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 142 1 2025-11-20 08:42:09.903 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:42:09.907 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:43:09.902 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:43:09.907 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:44:09.906 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 08:44:09.902 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:45:09.906 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:45:12.455 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:45:12.459 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:45:09.907 00:01:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 08:46:09.906 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:47:09.908 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:47:09.906 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:48:09.909 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:48:09.909 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:49:09.910 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:49:09.910 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:50:09.910 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:50:09.909 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:50:13.129 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:50:13.126 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:51:09.910 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:51:09.910 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:52:09.910 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:52:09.910 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:53:09.911 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:53:09.909 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:54:09.910 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:54:09.909 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:55:09.909 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:55:09.910 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:55:12.647 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 08:55:12.648 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 08:56:09.909 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 08:56:09.911 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:57:09.911 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:58:09.911 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 08:57:09.909 00:01:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 Summary: total flows: 133, total bytes: 18870, total packets: 274, avg bps: 41, avg pps: 0, avg bpp: 68 Time window: 2025-11-20 07:58:09 - 2025-11-20 08:58:09 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 64438.3 Runtime: 0.0021s