Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 01:54:25.011 00:06:00.373 TCP 29.156.0.1:34993 -> 29.155.0.1:179 14 861 1 2025-09-04 01:55:24.150 00:05:01.173 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-04 01:55:25.028 00:06:00.294 TCP 29.155.0.1:179 -> 29.156.0.1:34993 14 861 1 2025-09-04 01:57:24.916 00:05:00.426 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-04 01:58:24.937 00:05:00.386 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-04 01:58:23.004 00:05:10.008 OSPF 29.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-04 02:02:53.265 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:02:53.349 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:02:53.163 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:02:53.252 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:02:53.252 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:02:53.181 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:02:53.277 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:02:53.240 00:00:00.020 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:01:24.150 00:05:01.174 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-04 02:01:25.010 00:06:00.374 TCP 29.156.0.1:34993 -> 29.155.0.1:179 14 861 1 2025-09-04 02:02:25.029 00:06:00.296 TCP 29.155.0.1:179 -> 29.156.0.1:34993 14 861 1 2025-09-04 02:03:24.918 00:05:00.426 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-04 02:03:43.010 00:05:10.006 OSPF 29.0.7.1:0 -> 224.0.0.5:0 40 2872 1 2025-09-04 02:07:53.359 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:07:53.315 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:07:53.351 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:07:53.435 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:07:53.367 00:00:00.024 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:07:53.284 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:07:53.356 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:07:53.273 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:04:24.939 00:05:00.385 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-04 02:07:24.150 00:05:01.174 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-04 02:12:53.359 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:12:53.447 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:12:53.301 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:12:53.337 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:12:53.338 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:12:53.274 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:12:53.248 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:12:53.347 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:09:03.014 00:05:10.039 OSPF 29.0.7.1:0 -> 224.0.0.5:0 41 3072 1 2025-09-04 02:08:25.012 00:06:00.375 TCP 29.156.0.1:34993 -> 29.155.0.1:179 14 861 1 2025-09-04 02:09:24.928 00:05:00.419 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-04 02:09:25.030 00:06:00.295 TCP 29.155.0.1:179 -> 29.156.0.1:34993 14 861 1 2025-09-04 02:10:24.946 00:05:00.379 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-04 02:13:24.151 00:05:01.175 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-04 02:17:53.557 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:17:53.439 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:17:53.340 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:17:53.405 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:17:53.185 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:17:53.378 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:17:53.313 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:17:53.270 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:14:23.053 00:05:10.005 OSPF 29.0.7.1:0 -> 224.0.0.5:0 41 3024 1 2025-09-04 02:15:24.934 00:05:00.414 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-04 02:15:25.012 00:06:00.376 TCP 29.156.0.1:34993 -> 29.155.0.1:179 14 861 1 2025-09-04 02:16:24.955 00:05:00.374 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-04 02:16:25.033 00:06:00.294 TCP 29.155.0.1:179 -> 29.156.0.1:34993 14 861 1 2025-09-04 02:22:53.587 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:22:53.607 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:22:53.358 00:00:00.024 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:22:53.571 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:22:53.677 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:22:53.501 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:22:53.631 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:22:53.633 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:19:24.156 00:05:01.173 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-04 02:19:43.058 00:05:10.004 OSPF 29.0.7.1:0 -> 224.0.0.5:0 33 2240 1 2025-09-04 02:21:24.936 00:05:00.413 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-04 02:22:24.956 00:05:00.372 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-04 02:22:25.015 00:06:00.375 TCP 29.156.0.1:34993 -> 29.155.0.1:179 14 861 1 2025-09-04 02:27:53.830 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:27:53.822 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:27:53.626 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:27:53.650 00:00:00.024 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:27:53.648 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:27:53.745 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:27:53.611 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:27:53.803 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:23:25.036 00:06:00.295 TCP 29.155.0.1:179 -> 29.156.0.1:34993 14 861 1 2025-09-04 02:25:03.062 00:05:10.141 OSPF 29.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-09-04 02:25:24.155 00:05:01.175 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-04 02:27:24.938 00:05:00.413 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-04 02:28:24.960 00:05:00.372 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-04 02:32:53.495 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:32:53.859 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:32:53.727 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:32:53.825 00:00:00.024 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:32:53.800 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:32:53.411 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:32:53.761 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:32:53.749 00:00:00.024 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:29:25.020 00:06:00.373 TCP 29.156.0.1:34993 -> 29.155.0.1:179 14 861 1 2025-09-04 02:30:23.072 00:05:10.004 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2728 1 2025-09-04 02:30:25.039 00:06:00.293 TCP 29.155.0.1:179 -> 29.156.0.1:34993 14 861 1 2025-09-04 02:31:24.157 00:05:01.175 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-04 02:33:24.941 00:05:00.412 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-04 02:37:53.802 00:00:00.025 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:37:54.077 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:37:54.284 00:00:00.024 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:37:53.761 00:00:00.029 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:37:54.010 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:37:53.573 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:37:53.716 00:00:00.026 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:37:53.747 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:34:24.961 00:05:00.372 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-04 02:35:43.078 00:05:10.011 OSPF 29.0.7.1:0 -> 224.0.0.5:0 41 3132 1 2025-09-04 02:36:25.021 00:06:00.373 TCP 29.156.0.1:34993 -> 29.155.0.1:179 14 861 1 2025-09-04 02:37:24.158 00:05:01.176 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-04 02:37:25.042 00:06:00.292 TCP 29.155.0.1:179 -> 29.156.0.1:34993 14 861 1 2025-09-04 02:42:53.988 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:42:53.892 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:42:53.834 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:42:53.970 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:42:53.843 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:42:53.926 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:42:53.881 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:42:54.012 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:39:24.941 00:05:00.413 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-04 02:40:24.961 00:05:00.372 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-04 02:41:03.089 00:05:10.008 OSPF 29.0.7.1:0 -> 224.0.0.5:0 37 2584 1 2025-09-04 02:43:24.162 00:05:01.172 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-04 02:47:53.914 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:47:54.008 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:47:53.865 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:47:53.894 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:47:54.083 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:47:53.828 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:47:53.660 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:47:54.096 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:43:25.030 00:06:00.363 TCP 29.156.0.1:34993 -> 29.155.0.1:179 14 861 1 2025-09-04 02:45:24.944 00:05:00.410 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-04 02:44:25.050 00:06:00.284 TCP 29.155.0.1:179 -> 29.156.0.1:34993 14 861 1 2025-09-04 02:46:24.965 00:05:00.370 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-04 02:46:23.097 00:05:10.005 OSPF 29.0.7.1:0 -> 224.0.0.5:0 38 2800 1 2025-09-04 02:52:54.332 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:52:54.308 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:52:54.145 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:52:54.301 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:52:54.266 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:52:54.303 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:52:54.421 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:52:54.353 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:49:24.163 00:05:01.174 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-04 02:51:24.947 00:05:00.412 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-04 02:50:25.031 00:06:00.368 TCP 29.156.0.1:34993 -> 29.155.0.1:179 14 861 1 2025-09-04 02:51:43.102 00:05:10.007 OSPF 29.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-09-04 02:51:25.051 00:06:00.287 TCP 29.155.0.1:179 -> 29.156.0.1:34993 14 861 1 2025-09-04 02:52:24.966 00:05:00.372 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-04 02:57:54.015 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-04 02:57:54.314 00:00:00.024 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:57:54.067 00:00:00.050 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:57:54.093 00:00:00.031 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:57:54.008 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:57:53.930 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:57:54.246 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-04 02:57:54.163 00:00:00.043 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 Summary: total flows: 155, total bytes: 91402, total packets: 1314, avg bps: 191, avg pps: 0, avg bpp: 69 Time window: 2025-09-04 01:54:25 - 2025-09-04 02:57:54 Total flows processed: 155, passed: 155, Blocks skipped: 0, Bytes read: 16184 Sys: 0.0039s User: 0.0010s Wall: 0.0024s flows/second: 64662.5 Runtime: 0.0024s