Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 01:55:09.034 00:05:01.151 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-04 01:54:17.412 00:05:52.833 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-04 01:55:17.433 00:05:52.752 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-04 02:01:50.290 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:01:50.491 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:01:50.247 00:00:00.020 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:01:50.504 00:00:00.024 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:01:50.448 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:01:50.205 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:01:50.398 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:01:50.437 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 01:58:09.015 00:05:01.191 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-04 01:58:59.189 00:05:10.006 OSPF 29.0.7.1:0 -> 224.0.0.5:0 33 2256 1 2025-12-04 01:59:09.673 00:05:00.512 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-04 02:00:17.414 00:05:52.832 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-04 02:01:09.035 00:05:01.151 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-04 02:01:17.434 00:05:52.752 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-04 02:06:50.588 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:06:50.553 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:06:50.541 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:06:50.702 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:06:50.614 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:06:50.385 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:06:50.632 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:06:50.638 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:04:09.018 00:05:01.191 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-04 02:04:19.196 00:05:10.010 OSPF 29.0.7.1:0 -> 224.0.0.5:0 40 2860 1 2025-12-04 02:05:09.675 00:05:00.516 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-04 02:06:17.417 00:05:52.836 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-04 02:07:09.039 00:05:01.151 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-04 02:11:50.640 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:11:50.601 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:11:50.543 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:11:50.579 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:11:50.570 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:11:50.554 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:11:50.590 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:11:50.634 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:07:17.438 00:05:52.752 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-04 02:09:39.205 00:05:10.006 OSPF 29.0.7.1:0 -> 224.0.0.5:0 38 2772 1 2025-12-04 02:10:09.047 00:05:01.164 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-04 02:11:09.677 00:05:00.515 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-04 02:16:50.876 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:16:50.977 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:16:50.948 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:16:51.154 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:16:50.616 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:16:50.972 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:16:50.922 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:16:50.701 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:13:09.070 00:05:01.121 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-04 02:12:17.420 00:05:52.832 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-04 02:13:17.439 00:05:52.752 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-04 02:14:59.212 00:05:10.008 OSPF 29.0.7.1:0 -> 224.0.0.5:0 40 2968 1 2025-12-04 02:16:09.052 00:05:01.161 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-04 02:17:09.679 00:05:00.514 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-04 02:21:50.573 00:00:00.024 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:21:50.867 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:21:50.746 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:21:50.865 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:21:50.705 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:21:50.784 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:21:50.732 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:21:50.791 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:18:17.422 00:05:52.834 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-04 02:19:09.072 00:05:01.122 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-04 02:19:17.440 00:05:52.754 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-04 02:20:19.220 00:05:10.007 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2672 1 2025-12-04 02:22:09.053 00:05:01.162 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-04 02:26:50.889 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:26:50.956 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:26:50.945 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:26:50.943 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:26:50.868 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:26:50.840 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:26:51.012 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:26:50.952 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:23:09.681 00:05:00.514 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-04 02:24:17.424 00:05:52.832 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-04 02:25:09.073 00:05:01.121 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-04 02:25:39.227 00:05:10.006 OSPF 29.0.7.1:0 -> 224.0.0.5:0 36 2544 1 2025-12-04 02:25:17.443 00:05:52.752 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-04 02:31:51.064 00:00:00.020 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:31:50.918 00:00:00.029 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:31:51.162 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:31:51.087 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:31:50.782 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:31:51.049 00:00:00.034 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:31:50.995 00:00:00.020 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:31:50.866 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:28:09.054 00:05:01.163 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-04 02:29:09.683 00:05:00.515 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-04 02:30:59.235 00:05:10.004 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2728 1 2025-12-04 02:30:17.424 00:05:52.834 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-04 02:31:09.076 00:05:01.122 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-04 02:31:17.444 00:05:52.754 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-04 02:36:51.089 00:00:00.037 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:36:51.214 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:36:51.049 00:00:00.044 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:36:51.087 00:00:00.050 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:36:51.187 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:36:51.005 00:00:00.035 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:36:51.142 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:36:51.249 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:34:09.057 00:05:01.163 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-04 02:35:09.684 00:05:00.516 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-04 02:36:19.240 00:05:10.012 OSPF 29.0.7.1:0 -> 224.0.0.5:0 34 2388 1 2025-12-04 02:37:09.075 00:05:01.124 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-04 02:36:17.426 00:05:52.834 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-04 02:41:51.253 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:41:51.346 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:41:51.321 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:41:51.323 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:41:51.232 00:00:00.024 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:41:51.091 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:41:51.485 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:41:51.318 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:37:17.446 00:05:52.753 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-04 02:40:09.057 00:05:01.163 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-04 02:41:09.690 00:05:00.511 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-04 02:41:39.252 00:05:10.008 OSPF 29.0.7.1:0 -> 224.0.0.5:0 43 3240 1 2025-12-04 02:46:51.450 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:46:51.458 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:46:51.340 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:46:51.270 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:46:51.500 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:46:51.364 00:00:00.024 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:46:51.572 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:46:51.193 00:00:00.037 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:43:09.077 00:05:01.124 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-04 02:42:17.428 00:05:52.836 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-04 02:43:17.446 00:05:52.756 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-04 02:46:09.062 00:05:01.161 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-04 02:46:59.261 00:05:00.836 OSPF 29.0.7.1:0 -> 224.0.0.5:0 39 2764 1 2025-12-04 02:47:09.691 00:05:00.511 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-12-04 02:51:51.440 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:51:51.446 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:51:51.460 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:51:51.414 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:51:51.500 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:51:51.354 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:51:51.548 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:51:51.488 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:48:17.429 00:05:52.834 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-12-04 02:49:09.082 00:05:01.122 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-12-04 02:49:17.453 00:05:52.750 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-12-04 02:52:09.062 00:05:01.161 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-12-04 02:52:09.266 00:05:10.007 OSPF 29.0.7.1:0 -> 224.0.0.5:0 36 2528 1 2025-12-04 02:56:51.438 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-12-04 02:56:51.458 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:56:51.504 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:56:51.307 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:56:51.624 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:56:51.352 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:56:51.640 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:56:51.491 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-12-04 02:53:09.693 00:05:00.512 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 Summary: total flows: 157, total bytes: 90812, total packets: 1305, avg bps: 189, avg pps: 0, avg bpp: 69 Time window: 2025-12-04 01:54:17 - 2025-12-04 02:58:10 Total flows processed: 157, passed: 157, Blocks skipped: 0, Bytes read: 16392 Sys: 0.0043s User: 0.0017s Wall: 0.0020s flows/second: 79099.8 Runtime: 0.0020s