Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 07:59:14.906 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 07:59:14.909 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:00:02.127 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:00:02.125 00:00:00.021 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:00:14.907 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:00:14.906 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:01:14.905 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:02:14.905 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:01:14.908 00:01:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:03:14.908 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:03:14.907 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:04:14.910 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:04:14.906 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:05:02.125 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:05:02.127 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:05:14.908 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:05:14.905 00:01:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:06:14.910 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:07:14.912 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:07:14.909 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:08:14.908 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:08:14.911 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:09:14.909 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:09:14.914 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:10:02.462 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:10:02.459 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:10:14.913 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:11:14.912 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:10:14.910 00:01:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:12:14.912 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:12:14.910 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:13:14.910 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:14:14.911 00:00:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:13:14.913 00:01:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:15:02.500 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:15:02.502 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:15:14.915 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:15:14.911 00:01:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:16:14.916 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:17:14.912 00:00:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:17:14.914 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:18:14.912 00:00:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:18:14.915 00:01:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:19:14.913 00:00:00.072 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:20:02.664 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:20:02.661 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:20:14.915 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:20:14.913 00:00:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:21:14.916 00:00:00.067 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:21:14.912 00:00:00.073 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:22:14.914 00:00:00.072 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:22:14.915 00:00:00.067 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:23:14.913 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:24:14.913 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:23:14.916 00:01:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:25:02.815 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:25:02.819 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:25:14.914 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:25:14.917 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:26:14.916 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:26:14.914 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:27:14.916 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:27:14.914 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:28:14.914 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:28:14.918 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:29:14.916 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:29:14.915 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:30:02.713 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:30:02.716 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:30:14.914 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:30:14.917 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:31:14.918 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:31:14.915 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:32:14.917 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:32:14.915 00:00:00.075 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:33:14.915 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:33:14.919 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:34:14.916 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:34:14.919 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:35:02.809 00:00:00.023 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:35:02.811 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:35:14.917 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:35:14.919 00:00:00.068 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:36:14.916 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:36:14.919 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:37:14.919 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:38:14.919 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:37:14.917 00:01:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:39:14.919 00:00:00.069 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:39:14.917 00:00:00.074 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:40:02.887 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:40:02.885 00:00:00.024 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:40:14.919 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:40:14.917 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:41:14.917 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:41:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:42:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:42:14.917 00:01:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:43:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:44:14.917 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:44:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:45:02.943 00:00:00.024 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:45:02.939 00:00:00.024 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:45:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:45:14.917 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:46:14.918 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:46:14.920 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:47:14.922 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:48:14.921 00:00:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:47:14.918 00:01:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 4 246 1 2025-11-30 08:49:14.920 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:49:14.918 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:50:02.923 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:50:02.920 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:50:14.918 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:50:14.920 00:01:00.072 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:51:14.919 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:52:14.922 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:52:14.919 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:53:14.921 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:53:14.919 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:54:14.918 00:00:00.078 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:54:14.921 00:00:00.073 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:55:03.235 00:00:00.022 ICMP 27.0.198.2:0 -> 28.107.0.1:8.0 3 252 1 2025-11-30 08:55:03.239 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-30 08:55:14.920 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:55:14.921 00:01:00.074 TCP 179.27.28.28:179 -> 179.27.28.27:53088 4 246 1 2025-11-30 08:56:14.920 00:00:00.077 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:57:14.921 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 2025-11-30 08:57:14.926 00:00:00.070 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:58:14.924 00:00:00.071 TCP 179.27.28.28:179 -> 179.27.28.27:53088 2 123 1 2025-11-30 08:58:14.922 00:00:00.076 TCP 179.27.28.27:53088 -> 179.27.28.28:179 2 123 1 Summary: total flows: 132, total bytes: 20808, total packets: 312, avg bps: 47, avg pps: 0, avg bpp: 66 Time window: 2025-11-30 07:59:14 - 2025-11-30 08:58:14 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0060s User: 0.0000s Wall: 0.0018s flows/second: 71939.7 Runtime: 0.0018s