Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 13:54:27.455 00:06:00.437 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-09-13 13:55:27.890 00:05:04.342 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-13 13:56:27.970 00:05:02.321 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-13 13:56:27.435 00:06:00.476 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-09-13 13:58:27.951 00:05:04.263 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-13 14:02:34.907 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:02:34.689 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:02:34.974 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:02:34.813 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:02:34.727 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 13:58:50.993 00:05:00.093 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2732 1 2025-09-13 13:59:27.892 00:05:02.420 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-13 14:01:27.891 00:05:04.343 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-13 14:02:27.971 00:05:02.324 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-13 14:01:27.457 00:06:00.435 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-09-13 14:07:34.880 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:07:34.869 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:07:34.995 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:07:35.002 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:07:34.884 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:04:01.002 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 3096 1 2025-09-13 14:03:27.439 00:06:00.474 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-09-13 14:04:27.952 00:05:04.262 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-13 14:05:27.893 00:05:02.423 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-13 14:07:27.893 00:05:04.343 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-13 14:08:27.973 00:05:02.322 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-13 14:12:35.505 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:12:35.188 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:12:35.389 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:12:35.468 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:12:35.433 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:09:21.007 00:05:10.043 OSPF 30.0.8.1:0 -> 224.0.0.5:0 32 2176 1 2025-09-13 14:08:27.464 00:06:00.431 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-09-13 14:10:27.954 00:05:04.262 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-13 14:11:27.894 00:05:02.423 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-13 14:10:27.444 00:06:00.471 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-09-13 14:17:35.038 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:17:35.076 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:13:27.895 00:05:04.343 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-13 14:17:35.148 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:17:34.995 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:17:35.040 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:14:27.975 00:05:02.322 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-13 14:14:41.057 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2672 1 2025-09-13 14:15:27.464 00:06:00.431 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-09-13 14:16:27.955 00:05:04.265 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-13 14:17:27.896 00:05:02.424 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-13 14:17:27.445 00:06:00.471 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-09-13 14:22:35.101 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:22:35.105 00:00:00.041 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:22:35.275 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:22:35.069 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:22:35.116 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:19:27.895 00:05:04.345 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-13 14:20:01.065 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2608 1 2025-09-13 14:20:27.975 00:05:02.325 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-13 14:22:27.956 00:05:04.265 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-13 14:23:27.895 00:05:02.426 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-13 14:22:27.466 00:06:00.438 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-09-13 14:27:35.392 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:27:35.213 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:27:35.139 00:00:00.046 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:27:35.315 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:27:35.282 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:24:27.447 00:06:00.478 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-09-13 14:25:21.073 00:05:10.332 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2928 1 2025-09-13 14:25:27.896 00:05:04.359 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-13 14:26:27.985 00:05:02.317 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-13 14:32:35.520 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:32:35.315 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:32:35.423 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:32:35.469 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:32:35.474 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:28:27.964 00:05:04.271 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-13 14:29:27.904 00:05:02.419 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-13 14:29:27.467 00:06:00.438 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-09-13 14:30:41.086 00:05:10.050 OSPF 30.0.8.1:0 -> 224.0.0.5:0 45 3464 1 2025-09-13 14:31:27.905 00:05:04.351 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-13 14:32:27.986 00:05:02.319 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-13 14:31:27.449 00:06:00.477 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-09-13 14:37:35.503 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:37:35.403 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:37:35.485 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:37:35.443 00:00:00.026 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:37:35.566 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:34:27.965 00:05:04.272 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-13 14:35:27.905 00:05:02.419 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-13 14:36:01.089 00:05:10.010 OSPF 30.0.8.1:0 -> 224.0.0.5:0 32 2176 1 2025-09-13 14:36:27.472 00:06:00.434 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-09-13 14:37:27.905 00:05:04.354 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-13 14:38:27.987 00:05:02.318 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-13 14:42:36.046 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:42:35.924 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:42:36.007 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:42:35.879 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:42:35.915 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:38:27.453 00:06:00.473 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-09-13 14:40:27.968 00:05:04.273 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-13 14:41:27.907 00:05:02.421 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-13 14:41:21.098 00:05:10.001 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2672 1 2025-09-13 14:43:27.907 00:05:04.355 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-13 14:47:35.934 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:47:35.806 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:47:35.551 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:47:35.658 00:00:00.019 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:47:35.869 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:43:27.474 00:06:00.439 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-09-13 14:44:27.987 00:05:02.324 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-13 14:45:27.454 00:06:00.479 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-09-13 14:46:27.966 00:05:04.297 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-13 14:46:41.100 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2672 1 2025-09-13 14:47:27.912 00:05:02.419 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-13 14:52:35.891 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:52:35.754 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:52:35.931 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:52:35.799 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:52:35.932 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-09-13 14:49:27.913 00:05:04.372 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-09-13 14:50:27.993 00:05:02.319 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-09-13 14:50:27.477 00:06:00.436 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-09-13 14:52:01.106 00:05:10.002 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2624 1 2025-09-13 14:52:27.974 00:05:04.291 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-09-13 14:53:27.913 00:05:02.420 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-09-13 14:52:27.459 00:06:00.476 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-09-13 14:57:36.063 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-09-13 14:57:35.829 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 14:57:35.932 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-09-13 14:57:35.681 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-09-13 14:57:36.017 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 Summary: total flows: 129, total bytes: 89958, total packets: 1331, avg bps: 187, avg pps: 0, avg bpp: 67 Time window: 2025-09-13 13:54:27 - 2025-09-13 14:58:30 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0030s User: 0.0015s Wall: 0.0021s flows/second: 61366.1 Runtime: 0.0021s