Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 02:55:26.665 00:05:03.636 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 02:56:26.746 00:05:02.236 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 03:01:24.063 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:01:23.809 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 02:59:26.314 00:02:00.353 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 03:01:23.824 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:01:23.961 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:01:23.869 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 02:57:56.203 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2972 1 2025-09-11 02:58:26.293 00:04:00.393 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-09-11 02:58:26.725 00:05:03.557 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 03:02:26.316 00:01:00.351 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 02:59:26.665 00:05:02.340 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 03:01:26.666 00:05:03.636 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 03:06:24.002 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:04:26.315 00:02:00.352 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 03:06:24.055 00:00:00.008 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:06:23.763 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:06:23.911 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:06:23.910 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:02:26.746 00:05:02.238 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 03:03:26.296 00:04:00.392 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-09-11 03:03:16.210 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2604 1 2025-09-11 03:07:26.317 00:01:00.351 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 03:04:26.727 00:05:03.555 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 03:08:26.296 00:01:00.392 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 03:05:26.667 00:05:02.343 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 03:11:24.036 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:11:23.964 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:09:26.317 00:02:00.351 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 03:11:23.862 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:11:23.940 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:11:24.051 00:00:00.020 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:07:26.668 00:05:03.635 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 03:10:26.297 00:02:00.392 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 03:08:26.747 00:05:02.242 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 03:08:36.218 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2752 1 2025-09-11 03:12:26.318 00:01:00.351 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 03:13:26.298 00:01:00.391 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 03:10:26.729 00:05:03.554 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 03:11:26.670 00:05:02.343 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 03:16:24.170 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:16:23.964 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:16:24.004 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:16:24.081 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:16:24.112 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:15:26.298 00:02:00.394 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 03:13:26.670 00:05:03.634 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 03:13:56.228 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2528 1 2025-09-11 03:14:26.318 00:04:00.354 TCP 30.156.0.1:179 -> 30.152.0.1:44791 10 615 1 2025-09-11 03:14:26.750 00:05:02.241 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 03:18:26.299 00:01:00.395 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 03:16:26.731 00:05:03.554 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 03:21:24.580 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:21:24.401 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:21:24.252 00:00:00.026 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:21:24.570 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:21:24.482 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:17:26.672 00:05:02.341 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 03:20:26.300 00:02:00.393 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 03:19:26.319 00:04:00.355 TCP 30.156.0.1:179 -> 30.152.0.1:44791 10 615 1 2025-09-11 03:19:16.238 00:05:10.010 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2624 1 2025-09-11 03:19:26.674 00:05:03.631 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 03:23:26.299 00:01:00.395 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 03:20:26.754 00:05:02.241 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 03:24:26.320 00:01:00.354 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 03:26:24.491 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:26:24.264 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:26:24.047 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:26:24.294 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:26:24.501 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:22:26.735 00:05:03.559 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 03:23:26.674 00:05:02.342 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 03:26:26.321 00:02:00.355 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 03:24:36.247 00:05:10.043 OSPF 30.0.8.1:0 -> 224.0.0.5:0 42 3068 1 2025-09-11 03:25:26.299 00:04:00.396 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-09-11 03:25:26.675 00:05:03.635 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 03:29:26.320 00:01:00.356 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 03:26:26.754 00:05:02.243 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 03:31:24.347 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:31:24.437 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:31:24.466 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:31:24.473 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:31:24.559 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:28:26.735 00:05:03.555 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 03:31:26.321 00:02:00.357 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 03:29:26.676 00:05:02.344 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 03:29:56.254 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2876 1 2025-09-11 03:30:26.300 00:04:00.397 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-09-11 03:34:26.320 00:01:00.357 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 03:31:26.677 00:05:03.634 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 03:36:24.645 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:36:24.448 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:36:24.569 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:36:24.492 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:36:24.528 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:32:26.756 00:05:02.243 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 03:36:26.320 00:02:00.358 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 03:34:26.737 00:05:03.559 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 03:35:26.678 00:05:02.342 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 03:35:26.300 00:04:00.399 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-09-11 03:35:16.261 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2608 1 2025-09-11 03:39:26.321 00:01:00.358 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 03:40:26.301 00:01:00.398 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 03:41:24.691 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:41:24.452 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:41:24.580 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:41:24.384 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:41:24.712 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:37:26.679 00:05:03.641 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 03:38:26.759 00:05:02.242 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 03:41:26.321 00:02:00.360 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 03:42:26.301 00:02:00.398 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 03:40:26.739 00:05:03.559 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 03:40:36.271 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2592 1 2025-09-11 03:44:26.322 00:01:00.358 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 03:41:26.679 00:05:02.341 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 03:46:24.757 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:46:24.621 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:46:24.652 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:46:24.818 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:46:24.804 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:45:26.302 00:01:00.398 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 03:43:26.682 00:05:03.638 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 03:44:26.761 00:05:02.242 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 03:47:26.303 00:02:00.398 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 03:45:56.276 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2584 1 2025-09-11 03:46:26.325 00:04:00.356 TCP 30.156.0.1:179 -> 30.152.0.1:44791 10 615 1 2025-09-11 03:46:26.740 00:05:03.560 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 03:51:25.345 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:51:25.155 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:51:24.962 00:00:00.031 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:51:24.996 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:51:25.027 00:00:00.020 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:50:26.305 00:01:00.397 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 03:47:26.681 00:05:02.343 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 03:49:26.680 00:05:03.642 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 03:52:26.304 00:02:00.398 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 03:50:26.761 00:05:02.243 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 03:51:26.325 00:04:00.358 TCP 30.156.0.1:179 -> 30.152.0.1:44791 10 615 1 2025-09-11 03:51:16.283 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2824 1 2025-09-11 03:56:25.062 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 03:56:25.052 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 03:56:25.003 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 03:56:24.973 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 03:56:24.959 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 03:55:26.304 00:01:00.397 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 03:52:26.741 00:05:03.561 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 03:56:26.324 00:01:00.358 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 03:53:26.683 00:05:02.342 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 Summary: total flows: 150, total bytes: 89186, total packets: 1318, avg bps: 188, avg pps: 0, avg bpp: 67 Time window: 2025-09-11 02:55:26 - 2025-09-11 03:58:29 Total flows processed: 150, passed: 150, Blocks skipped: 0, Bytes read: 15664 Sys: 0.0027s User: 0.0018s Wall: 0.0022s flows/second: 67993.7 Runtime: 0.0022s