Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 18:58:11.408 00:01:00.443 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 18:55:11.830 00:05:01.094 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-08-12 18:59:11.431 00:02:00.401 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-08-12 18:56:58.097 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2720 1 2025-08-12 18:57:11.911 00:05:01.744 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-08-12 19:02:09.038 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:02:08.967 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:02:08.889 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:02:09.007 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:02:09.040 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:00:11.410 00:02:00.441 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-08-12 19:02:11.431 00:01:00.402 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 18:59:11.892 00:05:01.013 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-08-12 19:03:11.413 00:01:00.441 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:00:11.831 00:05:01.844 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-08-12 19:04:11.453 00:01:00.379 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:01:11.831 00:05:01.100 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-08-12 19:06:11.431 00:00:00.402 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-08-12 19:02:18.105 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2892 1 2025-08-12 19:05:11.412 00:02:00.442 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-08-12 19:07:09.306 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:07:09.344 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:07:09.575 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:07:09.389 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:07:09.540 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:03:11.913 00:05:01.743 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-08-12 19:07:11.432 00:01:00.402 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:08:11.412 00:01:00.443 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:05:11.894 00:05:01.023 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-08-12 19:09:11.433 00:01:00.403 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:06:11.834 00:05:01.842 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-08-12 19:07:11.834 00:05:01.103 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-08-12 19:07:38.110 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2868 1 2025-08-12 19:10:11.412 00:02:00.443 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-08-12 19:12:09.182 00:00:00.039 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:12:09.058 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:12:09.193 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:12:09.199 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:12:09.127 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:11:11.433 00:02:00.404 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-08-12 19:09:11.916 00:05:01.741 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-08-12 19:13:11.413 00:01:00.444 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:14:11.433 00:01:00.403 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:11:11.896 00:05:01.021 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-08-12 19:12:11.835 00:05:01.843 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-08-12 19:17:09.459 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:17:09.351 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:17:09.293 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:17:09.342 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:17:09.338 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:15:11.414 00:02:00.443 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-08-12 19:12:58.114 00:05:10.045 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2504 1 2025-08-12 19:13:11.837 00:05:01.102 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-08-12 19:16:11.434 00:02:00.403 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-08-12 19:18:11.413 00:01:00.445 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:15:11.916 00:05:01.745 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-08-12 19:19:11.434 00:01:00.404 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:17:11.897 00:05:01.022 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-08-12 19:22:09.190 00:00:00.034 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:22:09.363 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:22:09.400 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:22:09.340 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:22:09.303 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:20:11.414 00:02:00.444 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-08-12 19:18:11.837 00:05:01.847 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-08-12 19:18:18.159 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2544 1 2025-08-12 19:21:11.434 00:02:00.403 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-08-12 19:19:11.839 00:05:01.100 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-08-12 19:23:11.415 00:01:00.444 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:24:11.436 00:01:00.402 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:21:11.918 00:05:01.745 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-08-12 19:25:11.415 00:01:00.443 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:27:10.358 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:27:10.344 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:27:10.382 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:27:10.435 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:27:10.481 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:27:11.416 00:00:00.444 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-08-12 19:23:11.897 00:05:01.024 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-08-12 19:23:38.166 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2656 1 2025-08-12 19:26:11.436 00:02:00.405 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-08-12 19:24:11.838 00:05:01.845 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-08-12 19:28:11.417 00:01:00.444 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:25:11.839 00:05:01.107 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-08-12 19:29:11.436 00:01:00.404 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:30:11.417 00:01:00.443 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:27:11.921 00:05:01.743 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-08-12 19:32:09.594 00:00:00.014 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:32:09.529 00:00:00.030 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:31:11.437 00:01:00.404 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:32:09.559 00:00:00.014 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:32:09.456 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:32:09.722 00:00:00.026 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:28:58.174 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 44 3260 1 2025-08-12 19:33:11.437 00:00:00.403 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-08-12 19:29:11.901 00:05:01.026 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-08-12 19:32:11.418 00:02:00.447 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-08-12 19:30:11.841 00:05:01.844 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-08-12 19:34:11.439 00:01:00.406 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:31:11.841 00:05:01.106 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-08-12 19:35:11.419 00:01:00.447 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:37:09.565 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:36:11.438 00:01:00.408 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:37:09.671 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:37:09.519 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:37:09.715 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:37:09.442 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:33:11.922 00:05:01.746 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-08-12 19:38:11.439 00:00:00.407 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-08-12 19:34:18.182 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2948 1 2025-08-12 19:37:11.418 00:02:00.448 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-08-12 19:35:11.905 00:05:01.024 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-08-12 19:39:11.440 00:01:00.408 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:36:11.845 00:05:01.843 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-08-12 19:40:11.418 00:01:00.448 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:37:11.845 00:05:01.103 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-08-12 19:42:09.719 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:42:09.580 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:41:11.439 00:01:00.408 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:42:09.796 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:42:09.701 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:42:09.796 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:39:11.927 00:05:01.741 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-08-12 19:39:38.185 00:05:10.877 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2460 1 2025-08-12 19:42:11.419 00:02:00.448 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-08-12 19:43:11.439 00:02:00.408 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-08-12 19:41:11.906 00:05:01.023 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-08-12 19:45:11.421 00:01:00.448 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:42:11.846 00:05:01.843 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-08-12 19:47:09.724 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:47:09.933 00:00:00.025 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:46:11.439 00:01:00.408 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:47:09.794 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:47:09.697 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:47:10.052 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:43:11.847 00:05:01.102 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-08-12 19:44:58.198 00:05:00.935 OSPF 30.0.8.1:0 -> 224.0.0.5:0 34 2396 1 2025-08-12 19:47:11.420 00:02:00.448 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-08-12 19:45:11.928 00:05:01.741 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-08-12 19:48:11.441 00:02:00.408 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-08-12 19:50:11.423 00:01:00.447 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:47:11.908 00:05:01.021 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-08-12 19:52:10.082 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:52:10.204 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:51:11.442 00:01:00.408 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:52:10.186 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:52:10.057 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:52:10.221 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:48:11.849 00:05:01.840 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-08-12 19:49:11.849 00:05:01.101 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-08-12 19:52:11.431 00:02:00.440 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-08-12 19:50:08.199 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2672 1 2025-08-12 19:53:11.452 00:02:00.399 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-08-12 19:51:11.930 00:05:01.740 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-08-12 19:55:11.431 00:01:00.440 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-08-12 19:57:10.136 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-08-12 19:57:09.957 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-12 19:56:11.451 00:01:00.401 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-08-12 19:57:10.094 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-08-12 19:57:10.112 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-08-12 19:57:10.145 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-08-12 19:53:11.910 00:05:01.022 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-08-12 19:54:11.850 00:05:01.840 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 Summary: total flows: 163, total bytes: 89074, total packets: 1316, avg bps: 185, avg pps: 0, avg bpp: 67 Time window: 2025-08-12 18:55:11 - 2025-08-12 19:59:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0009s Wall: 0.0030s flows/second: 55068.2 Runtime: 0.0030s