Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 02:55:08.140 00:05:01.105 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-02 02:55:16.465 00:05:52.840 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-02 03:00:53.935 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:00:53.796 00:00:00.028 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:00:53.738 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:00:53.839 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:00:53.879 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:00:53.797 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:00:53.897 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:00:53.964 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 02:56:16.484 00:05:52.760 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-02 02:57:25.320 00:05:10.005 OSPF 29.0.7.1:0 -> 224.0.0.5:0 34 2388 1 2025-12-02 02:58:08.119 00:05:01.147 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-02 02:58:08.643 00:05:00.603 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-02 03:01:08.142 00:05:01.104 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-02 03:05:53.961 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:05:54.102 00:00:00.024 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:05:54.038 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:05:53.743 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:05:53.752 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:05:53.875 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:05:54.110 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:05:54.089 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:01:16.467 00:05:52.840 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-02 03:02:45.326 00:05:10.006 OSPF 29.0.7.1:0 -> 224.0.0.5:0 41 3096 1 2025-12-02 03:02:16.485 00:05:52.761 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-02 03:04:08.122 00:05:01.143 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-02 03:04:08.647 00:05:00.600 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-02 03:10:54.336 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:10:54.477 00:00:00.024 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:10:54.124 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:10:54.231 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:10:54.240 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:10:54.251 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:10:54.292 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:10:54.312 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:07:08.142 00:05:01.104 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-02 03:07:16.467 00:05:52.839 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-02 03:08:05.332 00:05:10.004 OSPF 29.0.7.1:0 -> 224.0.0.5:0 37 2560 1 2025-12-02 03:08:16.486 00:05:52.760 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-02 03:10:08.649 00:05:00.597 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-02 03:10:08.125 00:05:01.142 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-02 03:15:54.248 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:15:54.226 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:15:54.164 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:15:54.185 00:00:00.024 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:15:54.666 00:00:00.025 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:15:54.635 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:15:54.252 00:00:00.026 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:15:54.224 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:13:08.144 00:05:01.103 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-02 03:13:25.336 00:05:10.004 OSPF 29.0.7.1:0 -> 224.0.0.5:0 38 2736 1 2025-12-02 03:13:16.467 00:05:52.840 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-02 03:14:16.487 00:05:52.760 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-02 03:16:08.681 00:05:00.567 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-02 03:16:08.124 00:05:01.144 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-02 03:20:54.338 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:20:54.131 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:20:54.251 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:20:54.259 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:20:54.169 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:20:54.266 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:20:54.379 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:20:54.255 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:18:45.340 00:05:10.003 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2796 1 2025-12-02 03:19:08.146 00:05:01.102 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-02 03:19:16.470 00:05:52.839 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-02 03:20:16.491 00:05:52.758 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-02 03:25:54.513 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:25:54.534 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:25:54.427 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:25:54.400 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:25:54.154 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:25:54.427 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:25:54.419 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:25:54.517 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:22:08.682 00:05:00.566 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-02 03:22:08.125 00:05:01.142 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-02 03:24:05.343 00:05:10.048 OSPF 29.0.7.1:0 -> 224.0.0.5:0 35 2452 1 2025-12-02 03:25:08.145 00:05:01.104 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-02 03:25:16.471 00:05:52.839 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-02 03:30:54.358 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:30:54.578 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:30:54.511 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:30:54.617 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:30:54.620 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:30:54.274 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:30:54.388 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:30:54.606 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:26:16.492 00:05:52.758 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-02 03:28:08.125 00:05:01.145 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-02 03:28:08.686 00:05:00.564 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-02 03:29:25.348 00:05:10.002 OSPF 29.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-12-02 03:31:08.147 00:05:01.104 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-02 03:35:54.827 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:35:54.892 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:35:54.722 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:35:54.679 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:35:54.675 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:35:54.743 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:35:54.718 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:35:54.893 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:31:16.473 00:05:52.838 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-02 03:32:16.494 00:05:52.757 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-02 03:34:08.687 00:05:00.565 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-02 03:34:08.132 00:05:01.139 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-02 03:34:45.349 00:05:10.006 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2988 1 2025-12-02 03:40:54.758 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:40:54.692 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:40:54.724 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:40:54.564 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:40:54.645 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:40:54.690 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:40:54.808 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:40:54.732 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:37:08.153 00:05:01.100 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-02 03:37:16.474 00:05:52.837 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-02 03:38:16.494 00:05:52.758 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-02 03:40:08.133 00:05:01.138 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-02 03:40:08.687 00:05:00.564 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-02 03:40:05.355 00:05:10.061 OSPF 29.0.7.1:0 -> 224.0.0.5:0 43 3088 1 2025-12-02 03:45:54.735 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:45:54.770 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:45:54.856 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:45:54.800 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:45:54.640 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:45:54.761 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:45:54.691 00:00:00.020 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:45:54.726 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:43:08.154 00:05:01.102 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-02 03:43:16.476 00:05:52.841 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-02 03:44:16.495 00:05:52.761 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-02 03:45:25.360 00:05:10.003 OSPF 29.0.7.1:0 -> 224.0.0.5:0 38 2664 1 2025-12-02 03:46:08.688 00:05:00.568 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-02 03:46:08.135 00:05:01.142 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-02 03:50:54.839 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:50:54.913 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:50:54.936 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:50:54.897 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:50:54.744 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:50:54.848 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:50:54.954 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:50:54.829 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:49:08.154 00:05:01.103 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-02 03:49:16.477 00:05:52.840 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-02 03:50:45.363 00:05:10.004 OSPF 29.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-12-02 03:50:16.499 00:05:52.758 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-02 03:55:54.966 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-02 03:55:55.095 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:55:54.969 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:55:55.043 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:55:55.017 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:55:55.069 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:55:54.882 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:55:55.032 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-02 03:52:08.135 00:05:01.143 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-02 03:52:08.689 00:05:00.569 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 Summary: total flows: 157, total bytes: 90660, total packets: 1302, avg bps: 194, avg pps: 0, avg bpp: 69 Time window: 2025-12-02 02:55:08 - 2025-12-02 03:57:09 Total flows processed: 157, passed: 157, Blocks skipped: 0, Bytes read: 16392 Sys: 0.0070s User: 0.0000s Wall: 0.0030s flows/second: 51675.9 Runtime: 0.0031s