Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 17:55:28.753 00:05:00.467 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-10 18:01:12.905 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:01:12.901 00:00:00.024 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:01:12.821 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:01:12.864 00:00:00.025 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:01:12.926 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:01:12.851 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:01:12.899 00:00:00.024 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:01:12.764 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 17:57:06.655 00:05:10.013 OSPF 29.0.7.2:0 -> 224.0.0.5:0 36 2504 1 2025-09-10 17:57:28.774 00:05:00.427 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-10 17:58:28.814 00:05:01.161 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-09-10 17:59:27.217 00:05:01.539 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-10 18:00:28.753 00:05:01.242 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-09-10 18:01:28.754 00:05:00.470 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-10 18:06:13.073 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:06:13.023 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:06:13.205 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:06:13.283 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:06:13.013 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:06:12.987 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:06:13.035 00:00:00.024 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:06:12.977 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:02:26.667 00:05:10.005 OSPF 29.0.7.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-10 18:03:28.776 00:05:00.427 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-10 18:04:28.816 00:05:01.159 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-09-10 18:05:27.218 00:05:01.538 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-10 18:06:28.757 00:05:01.240 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-09-10 18:11:13.271 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:11:13.001 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:11:13.136 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:11:13.100 00:00:00.023 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:11:12.820 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:11:13.179 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:11:13.389 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:11:13.084 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:07:28.756 00:05:00.468 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-10 18:07:46.673 00:05:10.036 OSPF 29.0.7.2:0 -> 224.0.0.5:0 37 2640 1 2025-09-10 18:09:28.777 00:05:00.428 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-10 18:10:28.817 00:05:01.166 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-09-10 18:11:27.220 00:05:01.541 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-10 18:16:13.199 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:16:13.178 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:16:13.166 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:16:13.290 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:16:13.218 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:16:13.266 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:16:13.259 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:16:13.265 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:12:28.758 00:05:01.245 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-09-10 18:13:06.709 00:05:10.011 OSPF 29.0.7.2:0 -> 224.0.0.5:0 36 2584 1 2025-09-10 18:13:28.758 00:05:00.467 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-10 18:15:28.780 00:05:00.426 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-10 18:16:28.826 00:05:01.156 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-09-10 18:21:13.314 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:21:13.236 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:21:13.229 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:21:13.362 00:00:00.021 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:21:13.390 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:21:13.046 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:21:13.496 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:21:13.322 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:17:27.222 00:05:01.542 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-10 18:18:28.761 00:05:01.243 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-09-10 18:18:26.720 00:05:10.249 OSPF 29.0.7.2:0 -> 224.0.0.5:0 37 2668 1 2025-09-10 18:19:28.760 00:05:00.467 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-10 18:21:28.783 00:05:00.426 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-10 18:26:13.325 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:26:13.564 00:00:00.020 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:26:13.241 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:26:13.533 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:26:13.415 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:26:13.287 00:00:00.021 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:26:13.396 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:26:13.604 00:00:00.024 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:22:28.823 00:05:01.162 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-09-10 18:23:27.226 00:05:01.540 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-10 18:23:46.732 00:05:10.007 OSPF 29.0.7.2:0 -> 224.0.0.5:0 36 2488 1 2025-09-10 18:24:28.763 00:05:01.244 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-09-10 18:25:28.764 00:05:00.465 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-10 18:31:13.821 00:00:00.023 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:31:13.956 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:31:13.736 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:31:13.858 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:31:13.702 00:00:00.028 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:31:13.914 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:31:13.889 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:31:13.950 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:27:28.786 00:05:00.425 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-10 18:28:28.827 00:05:01.163 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-09-10 18:29:06.741 00:05:10.004 OSPF 29.0.7.2:0 -> 224.0.0.5:0 35 2456 1 2025-09-10 18:29:27.228 00:05:01.539 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-10 18:30:28.766 00:05:01.244 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-09-10 18:31:28.767 00:05:00.463 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-10 18:36:13.796 00:00:00.021 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:36:13.495 00:00:00.023 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:36:13.546 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:36:13.597 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:36:13.530 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:36:13.685 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:36:13.558 00:00:00.022 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:36:13.585 00:00:00.020 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:33:28.787 00:05:00.424 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-10 18:34:28.826 00:05:01.164 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-09-10 18:34:26.745 00:05:10.014 OSPF 29.0.7.2:0 -> 224.0.0.5:0 37 2528 1 2025-09-10 18:35:27.228 00:05:01.539 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-10 18:36:28.767 00:05:01.245 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-09-10 18:41:13.641 00:00:00.021 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:41:13.634 00:00:00.022 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:41:13.555 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:41:13.789 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:41:13.666 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:41:13.599 00:00:00.022 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:41:13.705 00:00:00.021 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:41:13.705 00:00:00.021 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:37:28.766 00:05:00.466 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-10 18:39:28.787 00:05:00.426 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-10 18:39:46.758 00:05:10.004 OSPF 29.0.7.2:0 -> 224.0.0.5:0 35 2464 1 2025-09-10 18:40:28.829 00:05:01.164 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-09-10 18:41:27.230 00:05:01.540 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-10 18:46:13.769 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:46:13.818 00:00:00.022 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:46:13.739 00:00:00.022 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:46:13.795 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:46:13.726 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:46:13.893 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:46:13.912 00:00:00.023 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:46:13.904 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:42:28.768 00:05:01.244 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-09-10 18:43:28.768 00:05:00.465 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-10 18:45:06.762 00:05:10.558 OSPF 29.0.7.2:0 -> 224.0.0.5:0 39 2868 1 2025-09-10 18:45:28.790 00:05:00.425 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-10 18:46:28.830 00:05:01.163 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-09-10 18:51:13.915 00:00:00.023 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:51:13.813 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:51:14.098 00:00:00.042 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:51:14.272 00:00:00.030 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:51:14.013 00:00:00.041 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:51:14.222 00:00:00.022 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:51:14.196 00:00:00.023 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:51:14.162 00:00:00.042 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:47:27.231 00:05:01.542 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-10 18:48:28.771 00:05:01.244 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 2025-09-10 18:49:28.774 00:05:00.465 TCP 29.155.0.1:35361 -> 29.152.0.1:179 12 738 1 2025-09-10 18:50:26.771 00:05:10.006 OSPF 29.0.7.2:0 -> 224.0.0.5:0 36 2488 1 2025-09-10 18:51:28.793 00:05:00.424 TCP 29.152.0.1:179 -> 29.155.0.1:35361 12 738 1 2025-09-10 18:56:13.976 00:00:00.022 ICMP 31.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-09-10 18:56:13.891 00:00:00.021 ICMP 27.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:56:13.846 00:00:00.023 ICMP 25.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:56:14.050 00:00:00.023 ICMP 23.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:56:14.026 00:00:00.021 ICMP 26.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:56:14.148 00:00:00.038 ICMP 22.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:56:14.063 00:00:00.022 ICMP 24.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:56:14.180 00:00:00.049 ICMP 21.0.198.2:0 -> 31.102.0.1:8.0 3 252 1 2025-09-10 18:52:28.834 00:05:01.161 TCP 29.156.0.1:34993 -> 29.155.0.1:179 12 738 1 2025-09-10 18:53:27.235 00:05:01.539 TCP 29.155.0.1:39283 -> 29.154.0.1:179 12 738 1 2025-09-10 18:54:28.773 00:05:01.243 TCP 29.155.0.1:179 -> 29.156.0.1:34993 12 738 1 Summary: total flows: 157, total bytes: 89100, total packets: 1286, avg bps: 185, avg pps: 0, avg bpp: 69 Time window: 2025-09-10 17:55:28 - 2025-09-10 18:59:30 Total flows processed: 157, passed: 157, Blocks skipped: 0, Bytes read: 16392 Sys: 0.0024s User: 0.0024s Wall: 0.0026s flows/second: 60480.0 Runtime: 0.0026s