Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 04:55:08.600 00:05:01.151 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-03 04:55:16.986 00:05:52.825 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-03 04:56:09.748 00:05:07.260 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-03 05:01:24.927 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:01:25.180 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:01:25.216 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:01:24.949 00:00:00.031 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:01:25.138 00:00:00.041 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:01:25.215 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:01:25.248 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:01:25.264 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 04:57:37.492 00:05:10.006 OSPF 29.0.7.1:0 -> 224.0.0.5:0 37 2608 1 2025-12-03 04:58:08.579 00:05:01.190 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-03 04:58:09.203 00:06:00.549 TCP 29.155.0.1:39283 -> 29.154.0.1:179 14 861 1 2025-12-03 05:01:08.599 00:05:01.150 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-03 05:01:16.986 00:05:52.823 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-03 05:02:09.749 00:05:07.261 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-03 05:06:25.049 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:06:25.202 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:06:24.964 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:06:25.270 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:06:25.496 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:06:25.344 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:06:25.008 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:06:25.027 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:02:57.499 00:05:10.004 OSPF 29.0.7.1:0 -> 224.0.0.5:0 38 2624 1 2025-12-03 05:04:08.582 00:05:01.188 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-03 05:05:09.205 00:06:00.545 TCP 29.155.0.1:39283 -> 29.154.0.1:179 14 861 1 2025-12-03 05:07:08.602 00:05:01.149 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-03 05:11:25.514 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:11:25.659 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:11:25.412 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:11:25.524 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:11:25.629 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:11:25.543 00:00:00.024 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:11:25.287 00:00:00.024 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:11:25.628 00:00:00.024 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:07:16.988 00:05:52.825 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-03 05:08:09.749 00:05:07.263 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-03 05:08:17.503 00:05:10.006 OSPF 29.0.7.1:0 -> 224.0.0.5:0 36 2504 1 2025-12-03 05:10:08.583 00:05:01.188 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-03 05:16:25.491 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:16:25.340 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:16:25.538 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:16:25.612 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:16:25.536 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:16:25.423 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:16:25.733 00:00:00.026 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:16:25.621 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:13:08.608 00:05:01.144 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-03 05:12:09.209 00:06:00.543 TCP 29.155.0.1:39283 -> 29.154.0.1:179 14 861 1 2025-12-03 05:13:37.509 00:05:10.001 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2904 1 2025-12-03 05:13:16.991 00:05:52.821 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-03 05:14:09.750 00:05:07.262 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-03 05:16:08.601 00:05:01.171 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-03 05:21:25.638 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:21:25.380 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:21:25.603 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:21:25.524 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:21:25.348 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:21:25.558 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:21:25.462 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:21:25.433 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:19:08.622 00:05:01.131 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-03 05:18:57.511 00:05:10.006 OSPF 29.0.7.1:0 -> 224.0.0.5:0 37 2660 1 2025-12-03 05:19:09.211 00:06:00.543 TCP 29.155.0.1:39283 -> 29.154.0.1:179 14 861 1 2025-12-03 05:19:16.992 00:05:52.822 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-03 05:20:09.751 00:05:07.266 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-03 05:22:08.602 00:05:01.171 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-03 05:26:25.509 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:26:25.618 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:26:25.716 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:26:25.594 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:26:25.578 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:26:25.842 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:26:25.560 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:26:25.679 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:24:17.519 00:05:10.046 OSPF 29.0.7.1:0 -> 224.0.0.5:0 43 3104 1 2025-12-03 05:25:08.623 00:05:01.132 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-03 05:25:16.997 00:05:52.819 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-03 05:26:09.753 00:05:07.267 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-03 05:26:09.215 00:06:00.540 TCP 29.155.0.1:39283 -> 29.154.0.1:179 14 861 1 2025-12-03 05:31:25.780 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:31:25.871 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:31:25.678 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:31:25.778 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:31:25.778 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:31:25.695 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:31:25.737 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:31:25.786 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:28:08.604 00:05:01.171 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-03 05:29:37.523 00:05:10.011 OSPF 29.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-12-03 05:31:08.625 00:05:01.132 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-03 05:31:16.999 00:05:00.002 TCP 29.156.0.1:34993 -> 29.155.0.1:179 11 686 1 2025-12-03 05:32:09.754 00:05:07.266 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-03 05:36:25.846 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:36:25.878 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:36:25.912 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:36:25.877 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:36:25.795 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:36:25.879 00:00:00.024 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:36:25.899 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:36:25.880 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:34:08.604 00:05:01.171 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-03 05:33:09.219 00:06:00.539 TCP 29.155.0.1:39283 -> 29.154.0.1:179 14 861 1 2025-12-03 05:34:57.535 00:05:10.009 OSPF 29.0.7.1:0 -> 224.0.0.5:0 35 2400 1 2025-12-03 05:37:08.627 00:05:01.130 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-03 05:37:09.816 00:05:07.187 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-03 05:41:26.014 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:41:25.893 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:41:26.034 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:41:26.077 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:41:25.851 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:41:25.947 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:41:25.984 00:00:00.024 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:41:25.938 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:38:09.758 00:05:07.266 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-03 05:40:08.608 00:05:01.173 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-03 05:40:17.542 00:05:10.005 OSPF 29.0.7.1:0 -> 224.0.0.5:0 38 2716 1 2025-12-03 05:40:09.219 00:06:00.542 TCP 29.155.0.1:39283 -> 29.154.0.1:179 14 861 1 2025-12-03 05:46:26.148 00:00:00.026 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:46:26.157 00:00:00.027 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:46:25.894 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:46:26.115 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:46:26.042 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:46:26.133 00:00:00.038 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:46:25.807 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:46:25.980 00:00:00.024 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:43:08.630 00:05:01.131 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-03 05:43:09.817 00:05:07.187 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-03 05:44:09.758 00:05:07.267 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-03 05:45:37.548 00:05:01.030 OSPF 29.0.7.1:0 -> 224.0.0.5:0 40 3064 1 2025-12-03 05:46:08.610 00:05:01.172 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-03 05:51:26.058 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:51:26.238 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:51:25.924 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:51:26.043 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:51:26.049 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:51:25.973 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:51:26.009 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:51:26.316 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:47:09.221 00:06:00.541 TCP 29.155.0.1:39283 -> 29.154.0.1:179 14 861 1 2025-12-03 05:49:08.632 00:05:01.131 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-03 05:49:09.820 00:05:07.185 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-03 05:50:09.761 00:05:07.264 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-03 05:50:47.555 00:05:10.006 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2816 1 2025-12-03 05:52:08.610 00:05:01.173 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-03 05:56:26.269 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-03 05:56:26.357 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:56:26.295 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:56:26.072 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:56:26.253 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:56:26.184 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:56:26.033 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-03 05:56:26.364 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 Summary: total flows: 155, total bytes: 90348, total packets: 1296, avg bps: 194, avg pps: 0, avg bpp: 69 Time window: 2025-12-03 04:55:08 - 2025-12-03 05:57:09 Total flows processed: 155, passed: 155, Blocks skipped: 0, Bytes read: 16184 Sys: 0.0021s User: 0.0032s Wall: 0.0019s flows/second: 79729.8 Runtime: 0.0020s