Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 09:58:26.437 00:01:00.370 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 09:55:26.806 00:05:03.693 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 09:56:26.887 00:05:02.263 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 09:59:26.417 00:02:00.412 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 10:01:32.434 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:01:32.373 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:01:32.496 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:01:32.511 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:01:32.761 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:00:26.438 00:02:00.370 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 09:58:26.866 00:05:03.613 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 09:58:26.727 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2560 1 2025-09-11 10:02:26.418 00:01:00.409 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 09:59:26.807 00:05:02.363 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 10:03:26.439 00:01:00.369 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:04:26.418 00:01:00.410 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:01:26.810 00:05:03.691 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 10:06:26.420 00:00:00.409 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-09-11 10:02:26.888 00:05:02.264 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 10:06:32.197 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:06:32.221 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:06:32.382 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:06:32.349 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:06:32.324 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:05:26.439 00:02:00.369 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 10:03:46.731 00:05:10.968 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2888 1 2025-09-11 10:07:26.418 00:01:00.410 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:04:26.867 00:05:03.614 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 10:08:26.439 00:01:00.369 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:05:26.807 00:05:02.365 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 10:09:26.423 00:01:00.410 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:07:26.807 00:05:03.694 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 10:11:32.658 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:11:32.401 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:11:32.433 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:11:32.499 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:11:32.418 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:10:26.439 00:02:00.370 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 10:08:26.888 00:05:02.265 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 10:09:06.739 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2992 1 2025-09-11 10:11:26.421 00:02:00.410 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 10:13:26.440 00:01:00.369 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:10:26.874 00:05:03.614 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 10:14:26.420 00:01:00.410 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:11:26.809 00:05:02.366 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 10:16:32.657 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:16:32.592 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:16:32.617 00:00:00.027 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:16:32.771 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:16:32.670 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:15:26.442 00:02:00.368 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 10:13:26.810 00:05:03.696 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 10:16:26.422 00:02:00.408 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 10:14:26.890 00:05:02.266 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 10:14:26.747 00:05:10.015 OSPF 30.0.8.1:0 -> 224.0.0.5:0 34 2384 1 2025-09-11 10:18:26.443 00:01:00.368 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:19:26.422 00:01:00.409 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:16:26.870 00:05:03.617 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 10:20:26.442 00:01:00.369 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:17:26.810 00:05:02.366 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 10:21:32.881 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:21:32.916 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:21:32.907 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:21:32.829 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:21:32.686 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:22:26.445 00:00:00.368 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-09-11 10:21:26.422 00:02:00.409 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 10:19:26.811 00:05:03.708 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 10:19:46.761 00:05:10.013 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2816 1 2025-09-11 10:23:26.443 00:01:00.369 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:20:26.891 00:05:02.266 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 10:24:26.423 00:01:00.410 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:25:26.443 00:01:00.369 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:22:26.872 00:05:03.619 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 10:26:32.701 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:26:32.626 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:26:32.770 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:26:32.574 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:26:32.757 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:27:26.446 00:00:00.367 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-09-11 10:23:26.811 00:05:02.365 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 10:26:26.426 00:02:00.408 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 10:25:06.774 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2400 1 2025-09-11 10:28:26.446 00:01:00.366 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:25:26.812 00:05:03.698 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 10:29:26.426 00:01:00.407 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:26:26.893 00:05:02.265 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 10:30:26.446 00:01:00.367 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:31:33.020 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:31:32.849 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:31:32.885 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:31:32.830 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:31:32.791 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:28:26.873 00:05:03.625 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 10:31:26.427 00:02:00.407 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 10:29:26.813 00:05:02.365 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 10:32:26.446 00:02:00.367 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 10:30:26.780 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2784 1 2025-09-11 10:34:26.428 00:01:00.406 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:31:26.813 00:05:03.712 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 10:35:26.447 00:01:00.367 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:32:26.893 00:05:02.265 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 10:36:32.968 00:00:00.025 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:36:32.941 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:36:32.934 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:36:32.822 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:36:32.921 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:36:26.429 00:01:00.406 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:38:26.427 00:00:00.406 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-09-11 10:34:26.873 00:05:03.626 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 10:37:26.446 00:02:00.367 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 10:35:26.813 00:05:02.375 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 10:35:46.788 00:05:10.005 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 3112 1 2025-09-11 10:39:26.427 00:01:00.407 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:40:26.447 00:01:00.367 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:37:26.814 00:05:03.706 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 10:41:33.169 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:41:33.106 00:00:00.050 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:41:33.038 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:41:33.040 00:00:00.026 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:41:33.056 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:41:26.426 00:01:00.407 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:38:26.894 00:05:02.276 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 10:42:26.447 00:02:00.367 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 10:40:26.874 00:05:03.626 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 10:41:06.793 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2400 1 2025-09-11 10:43:26.427 00:02:00.407 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 10:41:26.814 00:05:02.376 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 10:45:26.448 00:01:00.367 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:46:33.089 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:46:32.940 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:46:33.117 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:46:32.979 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:46:33.342 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:46:26.428 00:01:00.406 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:43:26.815 00:05:03.706 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 10:44:26.895 00:05:02.276 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 10:47:26.449 00:02:00.366 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-09-11 10:48:26.429 00:02:00.406 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 10:46:26.874 00:05:03.627 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 10:46:26.797 00:05:00.494 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2892 1 2025-09-11 10:50:26.449 00:01:00.366 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:47:26.815 00:05:02.377 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 10:51:33.276 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:51:33.044 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:51:33.166 00:00:00.025 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:51:33.248 00:00:00.042 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:51:33.360 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:51:26.429 00:01:00.405 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:52:26.449 00:01:00.376 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:49:26.815 00:05:03.707 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-11 10:54:26.449 00:00:00.369 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-09-11 10:50:26.895 00:05:02.280 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-11 10:53:26.429 00:02:00.410 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-09-11 10:51:36.806 00:05:10.018 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2464 1 2025-09-11 10:55:26.449 00:01:00.370 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-09-11 10:52:26.876 00:05:03.628 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-11 10:56:33.288 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-11 10:56:33.896 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-11 10:56:33.319 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-11 10:56:33.930 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-11 10:56:34.055 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-11 10:56:26.429 00:01:00.410 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-09-11 10:53:26.826 00:05:02.372 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-11 10:57:26.452 00:01:00.370 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 Summary: total flows: 165, total bytes: 89092, total packets: 1317, avg bps: 188, avg pps: 0, avg bpp: 67 Time window: 2025-09-11 09:55:26 - 2025-09-11 10:58:29 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0012s User: 0.0035s Wall: 0.0023s flows/second: 70820.7 Runtime: 0.0023s