Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 13:55:04.991 00:05:01.064 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-25 13:56:05.307 00:05:00.749 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-25 13:58:04.972 00:05:01.105 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-25 13:57:12.472 00:05:53.645 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-25 14:02:45.010 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:02:44.724 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:02:44.754 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:02:44.978 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:02:44.687 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:02:44.796 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:02:44.828 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:02:44.772 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 13:58:12.493 00:05:53.565 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-25 13:59:31.888 00:05:10.003 OSPF 29.0.7.1:0 -> 224.0.0.5:0 36 2544 1 2025-11-25 14:01:04.994 00:05:01.064 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-25 14:02:05.308 00:05:00.750 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-25 14:07:45.092 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:07:45.066 00:00:00.032 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:07:45.063 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:07:44.857 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:07:45.018 00:00:00.025 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:07:44.961 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:07:44.909 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:07:45.105 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:04:04.974 00:05:01.107 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-25 14:03:12.477 00:05:53.644 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-25 14:04:51.891 00:05:10.009 OSPF 29.0.7.1:0 -> 224.0.0.5:0 37 2652 1 2025-11-25 14:04:12.498 00:05:53.563 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-25 14:07:04.994 00:05:01.066 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-25 14:08:05.309 00:05:00.752 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-25 14:12:45.222 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:12:45.085 00:00:00.025 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:12:45.216 00:00:00.024 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:12:44.853 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:12:45.171 00:00:00.025 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:12:45.137 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:12:45.173 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:12:45.278 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:10:04.974 00:05:01.107 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-25 14:09:12.479 00:05:53.642 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-25 14:10:11.901 00:05:10.008 OSPF 29.0.7.1:0 -> 224.0.0.5:0 38 2716 1 2025-11-25 14:10:12.508 00:05:53.554 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-25 14:13:04.996 00:05:01.066 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-25 14:17:45.222 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:17:45.224 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:17:45.333 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:17:45.072 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:17:45.351 00:00:00.024 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:17:45.159 00:00:00.024 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:17:45.331 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:17:45.437 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:14:05.311 00:05:00.751 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-25 14:15:31.909 00:05:10.005 OSPF 29.0.7.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-25 14:16:04.975 00:05:01.107 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-25 14:15:12.485 00:05:53.637 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-25 14:16:12.515 00:05:53.548 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-25 14:22:45.529 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:22:45.320 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:22:45.340 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:22:45.370 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:22:45.530 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:22:45.443 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:22:45.325 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:22:45.326 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:19:04.996 00:05:01.070 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-25 14:20:05.316 00:05:00.751 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-25 14:20:51.914 00:05:00.583 OSPF 29.0.7.1:0 -> 224.0.0.5:0 42 3132 1 2025-11-25 14:22:04.978 00:05:01.109 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-25 14:21:12.497 00:05:53.630 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-25 14:22:12.515 00:05:53.551 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-25 14:27:45.531 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:27:45.463 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:27:45.379 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:27:45.464 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:27:45.421 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:27:45.459 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:27:45.576 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:27:45.507 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:25:05.001 00:05:01.066 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-25 14:26:05.318 00:05:00.750 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-25 14:26:01.919 00:05:10.011 OSPF 29.0.7.1:0 -> 224.0.0.5:0 35 2528 1 2025-11-25 14:28:04.980 00:05:01.107 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-25 14:27:12.495 00:05:53.632 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-25 14:32:45.651 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:32:45.690 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:32:45.425 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:32:45.566 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:32:45.611 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:32:45.804 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:32:45.630 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:32:45.485 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:28:12.517 00:05:53.551 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-25 14:31:05.002 00:05:01.067 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-25 14:31:21.930 00:05:10.007 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2704 1 2025-11-25 14:32:05.319 00:05:00.749 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-25 14:37:45.749 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:37:45.755 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:37:45.665 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:37:45.708 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:37:45.816 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:37:45.782 00:00:00.025 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:37:45.773 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:37:45.816 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:34:04.982 00:05:01.107 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-25 14:33:12.497 00:05:53.632 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-25 14:34:12.519 00:05:53.550 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-25 14:36:41.937 00:05:10.003 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2728 1 2025-11-25 14:37:05.006 00:05:01.065 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-25 14:38:05.321 00:05:00.749 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-25 14:42:45.741 00:00:00.024 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:42:45.746 00:00:00.024 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:42:45.631 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:42:45.627 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:42:45.716 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:42:45.682 00:00:00.024 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:42:45.919 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:42:45.803 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:40:04.986 00:05:01.103 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-25 14:39:12.500 00:05:53.630 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-25 14:40:12.521 00:05:53.551 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-25 14:42:01.940 00:05:10.005 OSPF 29.0.7.1:0 -> 224.0.0.5:0 37 2636 1 2025-11-25 14:43:05.007 00:05:01.065 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-25 14:47:45.989 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:47:45.859 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:47:46.002 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:47:45.766 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:47:45.750 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:47:45.791 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:47:45.815 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:47:45.837 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:44:05.322 00:05:00.751 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-25 14:46:04.987 00:05:01.106 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-25 14:45:12.501 00:05:53.632 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-25 14:46:12.521 00:05:53.553 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-25 14:47:21.945 00:05:10.005 OSPF 29.0.7.1:0 -> 224.0.0.5:0 40 2852 1 2025-11-25 14:52:45.809 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:52:45.984 00:00:00.024 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:52:45.866 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:52:46.015 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:52:45.939 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:52:46.049 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:52:46.080 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:52:46.025 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:49:05.011 00:05:01.063 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-11-25 14:50:05.325 00:05:00.749 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-11-25 14:52:04.990 00:05:01.104 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-11-25 14:51:12.503 00:05:53.632 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-11-25 14:52:41.949 00:05:10.015 OSPF 29.0.7.1:0 -> 224.0.0.5:0 37 2732 1 2025-11-25 14:52:12.523 00:05:53.552 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-11-25 14:57:46.051 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-11-25 14:57:45.988 00:00:00.024 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:57:45.852 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:57:46.087 00:00:00.034 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:57:46.089 00:00:00.036 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:57:45.965 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:57:46.051 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-11-25 14:57:46.101 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 Summary: total flows: 157, total bytes: 90636, total packets: 1302, avg bps: 191, avg pps: 0, avg bpp: 69 Time window: 2025-11-25 13:55:04 - 2025-11-25 14:58:06 Total flows processed: 157, passed: 157, Blocks skipped: 0, Bytes read: 16392 Sys: 0.0023s User: 0.0023s Wall: 0.0017s flows/second: 94858.2 Runtime: 0.0017s