Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 10:59:09.952 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 10:59:09.956 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 11:00:09.955 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 11:00:09.952 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:00:15.214 00:00:00.024 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:00:15.217 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:01:09.952 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:01:09.956 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 11:02:09.956 00:00:00.042 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:02:09.954 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:03:09.957 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:03:09.955 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:04:09.955 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:04:09.956 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:05:09.954 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:05:09.957 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:05:15.366 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:05:15.364 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:06:09.956 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:06:09.957 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:07:09.956 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:07:09.957 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:08:09.958 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:08:09.956 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:09:09.956 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:09:09.958 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:10:15.394 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:10:15.397 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:10:09.958 00:01:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 11:10:09.956 00:01:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 11:12:09.956 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:12:09.958 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:13:09.956 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:13:09.958 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:14:09.957 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:14:09.959 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:15:17.256 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:15:17.253 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:15:09.958 00:01:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 11:15:09.957 00:01:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 11:17:09.958 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:17:09.957 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:18:09.957 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:18:09.960 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:19:09.958 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:19:09.960 00:01:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 11:20:09.960 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:20:17.292 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:20:17.289 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:21:09.959 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:21:09.961 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:22:09.960 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:22:09.961 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:23:09.961 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:23:09.960 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:24:09.960 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:24:09.961 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:25:09.960 00:00:00.003 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:25:09.961 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:25:17.455 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:25:17.459 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:26:09.961 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:26:09.963 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:27:09.961 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:27:09.962 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:28:09.961 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:28:09.963 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:29:09.962 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:29:09.964 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:30:09.962 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:30:09.964 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:30:17.658 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:30:17.661 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:31:09.961 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:31:09.963 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:32:09.962 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:32:09.962 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:33:09.962 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:33:09.963 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:34:09.963 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:34:09.962 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:35:09.961 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:35:09.964 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:35:17.459 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:35:17.462 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:36:09.962 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:36:09.963 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:37:09.964 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:37:09.963 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:38:09.963 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:38:09.961 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:39:09.963 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:39:09.962 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:40:09.962 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:40:09.963 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:40:17.642 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:40:17.644 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:41:09.964 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:41:09.964 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:42:09.964 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:42:09.963 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:43:09.964 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:43:09.964 00:00:00.003 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:44:09.962 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:44:09.965 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:45:09.964 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:45:09.963 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:45:17.781 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:45:17.779 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:46:09.966 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:46:09.964 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:47:09.965 00:01:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-20 11:47:09.965 00:01:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-20 11:49:09.964 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:49:09.967 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:50:09.967 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:50:09.968 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:50:18.012 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:50:18.010 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:51:09.968 00:00:00.001 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:51:09.966 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:52:09.967 00:00:00.002 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:52:09.966 00:00:00.004 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:53:09.970 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-20 11:53:09.967 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:54:09.967 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:54:09.969 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 11:55:09.971 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 11:55:09.968 00:00:00.005 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:55:18.260 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-20 11:55:18.262 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 11:56:09.970 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 11:56:09.967 00:00:00.006 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:57:09.967 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-20 11:57:09.973 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 11:58:09.973 00:00:00.000 TCP 179.27.28.27:53088 -> 179.27.28.28:179 1 71 1 2025-11-20 11:58:09.968 00:00:00.007 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 Summary: total flows: 137, total bytes: 20392, total packets: 304, avg bps: 46, avg pps: 0, avg bpp: 67 Time window: 2025-11-20 10:59:09 - 2025-11-20 11:58:09 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0049s User: 0.0010s Wall: 0.0021s flows/second: 66568.5 Runtime: 0.0021s