Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 19:54:09.980 00:05:53.841 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-20 19:55:02.786 00:05:00.975 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-20 19:55:02.929 00:05:00.832 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-20 19:55:12.372 00:05:10.009 OSPF 29.0.7.1:0 -> 224.0.0.5:0 40 2892 1 2025-11-20 20:00:27.783 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:00:27.634 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:00:27.669 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:00:27.681 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:00:27.596 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:00:27.707 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:00:27.730 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:00:27.681 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 19:58:02.766 00:05:01.014 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-20 20:00:03.761 00:05:06.243 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-20 20:00:32.380 00:05:10.007 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2860 1 2025-11-20 20:00:09.982 00:05:53.840 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-20 20:01:02.787 00:05:00.974 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-20 20:01:02.930 00:05:00.831 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-20 20:05:27.834 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:05:27.798 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:05:27.742 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:05:27.764 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:05:27.597 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:05:27.882 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:05:27.949 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:05:27.683 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:04:02.767 00:05:01.014 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-20 20:05:52.387 00:05:10.005 OSPF 29.0.7.1:0 -> 224.0.0.5:0 42 2928 1 2025-11-20 20:06:03.761 00:05:06.244 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-20 20:10:27.919 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:10:27.790 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:10:27.838 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:10:27.762 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:10:27.833 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:10:27.798 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:10:28.036 00:00:00.024 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:10:27.981 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:06:09.983 00:05:53.839 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-20 20:07:02.788 00:05:00.974 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-20 20:07:02.932 00:05:00.830 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-20 20:10:02.770 00:05:01.014 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-20 20:11:12.393 00:05:10.004 OSPF 29.0.7.1:0 -> 224.0.0.5:0 33 2308 1 2025-11-20 20:15:27.963 00:00:00.024 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:15:28.309 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:15:28.060 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:15:28.270 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:15:28.189 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:15:28.224 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:15:28.331 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:15:28.275 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:12:03.761 00:05:06.248 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-20 20:13:02.788 00:05:00.976 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-20 20:13:02.936 00:05:00.828 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-20 20:12:09.985 00:05:53.840 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-20 20:16:02.771 00:05:01.015 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-20 20:20:28.244 00:00:00.020 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:20:28.012 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:20:28.210 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:20:28.310 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:20:28.063 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:20:28.008 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:20:28.281 00:00:00.024 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:20:28.149 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:16:32.397 00:05:10.003 OSPF 29.0.7.1:0 -> 224.0.0.5:0 38 2728 1 2025-11-20 20:18:03.764 00:05:06.246 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-20 20:19:02.789 00:05:00.975 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-20 20:19:02.937 00:05:00.827 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-20 20:18:09.989 00:05:53.836 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-20 20:25:28.340 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:25:28.062 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:25:28.201 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:25:28.330 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:25:28.047 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:25:28.256 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:25:27.992 00:00:00.024 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:25:28.301 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:21:52.401 00:05:10.007 OSPF 29.0.7.1:0 -> 224.0.0.5:0 40 2792 1 2025-11-20 20:22:02.770 00:05:01.015 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-20 20:24:03.765 00:05:06.249 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-20 20:25:02.790 00:05:00.976 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-20 20:25:02.940 00:05:00.826 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-20 20:24:09.990 00:05:53.838 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-20 20:30:28.364 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:30:28.353 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:30:28.338 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:30:28.388 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:30:28.258 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:30:28.237 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:30:28.342 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:30:28.344 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:27:12.407 00:05:10.005 OSPF 29.0.7.1:0 -> 224.0.0.5:0 38 2832 1 2025-11-20 20:28:02.776 00:05:01.011 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-20 20:30:03.768 00:05:06.248 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-20 20:31:02.797 00:05:00.970 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-20 20:31:02.941 00:05:00.826 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-20 20:30:09.993 00:05:53.835 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-20 20:35:28.277 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:35:28.339 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:35:28.530 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:35:28.380 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:35:28.380 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:35:28.335 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:35:28.600 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:35:28.466 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:32:32.412 00:05:10.003 OSPF 29.0.7.1:0 -> 224.0.0.5:0 41 2932 1 2025-11-20 20:34:02.778 00:05:01.012 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-20 20:36:03.767 00:05:06.250 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-20 20:40:28.416 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:40:28.658 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:40:28.582 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:40:28.494 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:40:28.735 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:40:28.331 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:40:28.583 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:40:28.672 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:37:02.798 00:05:00.972 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-20 20:37:02.943 00:05:00.827 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-20 20:36:09.995 00:05:53.836 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-20 20:37:52.416 00:05:10.008 OSPF 29.0.7.1:0 -> 224.0.0.5:0 35 2468 1 2025-11-20 20:40:02.779 00:05:01.011 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-20 20:45:28.508 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:45:28.654 00:00:00.024 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:45:28.639 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:45:28.652 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:45:28.651 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:45:28.606 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:45:28.519 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:45:28.735 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:42:03.770 00:05:06.250 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-20 20:42:09.998 00:05:00.002 TCP 29.156.0.1:34993 -> 29.155.0.1:179 11 686 1 2025-11-20 20:43:02.799 00:05:00.971 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-20 20:43:02.943 00:05:00.827 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-20 20:43:12.425 00:05:10.010 OSPF 29.0.7.1:0 -> 224.0.0.5:0 36 2584 1 2025-11-20 20:46:02.780 00:05:01.013 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-20 20:50:28.734 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:50:28.846 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:50:28.859 00:00:00.030 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:50:28.894 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:50:28.724 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:50:28.649 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:50:28.914 00:00:00.018 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:50:28.964 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:48:03.771 00:05:06.256 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-20 20:48:03.831 00:05:06.176 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-20 20:48:32.435 00:05:10.225 OSPF 29.0.7.1:0 -> 224.0.0.5:0 41 2872 1 2025-11-20 20:49:02.800 00:05:00.976 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-20 20:49:02.946 00:05:00.830 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-20 20:55:28.994 00:00:00.027 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:55:28.926 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:55:28.890 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:55:28.963 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:55:28.757 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:55:28.865 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:55:29.230 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-20 20:55:28.843 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-20 20:52:02.780 00:05:01.016 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-20 20:53:52.440 00:05:10.017 OSPF 29.0.7.1:0 -> 224.0.0.5:0 36 2688 1 2025-11-20 20:54:03.835 00:05:06.175 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-20 20:54:03.776 00:05:06.254 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 Summary: total flows: 159, total bytes: 94662, total packets: 1358, avg bps: 194, avg pps: 0, avg bpp: 69 Time window: 2025-11-20 19:54:09 - 2025-11-20 20:59:10 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0050s User: 0.0017s Wall: 0.0029s flows/second: 55537.5 Runtime: 0.0029s