Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 20:54:43.983 00:05:52.623 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-01 20:55:36.684 00:05:03.171 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-01 20:58:36.373 00:02:00.255 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-10-01 21:01:23.017 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:01:23.015 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:01:22.981 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:01:22.993 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:01:23.112 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 20:57:17.494 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2904 1 2025-10-01 20:59:36.396 00:02:00.210 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-10-01 20:57:36.604 00:05:03.272 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-01 21:01:36.374 00:01:00.251 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 20:57:43.965 00:05:52.702 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-01 21:02:36.398 00:01:00.209 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:03:36.376 00:02:00.249 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-10-01 21:00:43.985 00:05:52.621 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-01 21:01:36.686 00:05:03.171 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-01 21:06:23.274 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:06:23.357 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:06:23.257 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:06:23.400 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:06:23.436 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:04:36.396 00:02:00.210 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-10-01 21:02:37.503 00:05:10.005 OSPF 30.0.8.1:0 -> 224.0.0.5:0 42 2976 1 2025-10-01 21:06:36.378 00:01:00.250 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:03:36.606 00:05:03.271 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-01 21:07:36.397 00:01:00.209 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:03:43.965 00:05:52.702 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-01 21:08:36.378 00:02:00.249 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-10-01 21:11:23.371 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:11:23.231 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:11:23.407 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:11:23.325 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:11:23.136 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:09:36.397 00:02:00.210 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-10-01 21:07:36.687 00:05:03.171 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-01 21:06:43.985 00:05:52.622 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-01 21:07:57.507 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 3012 1 2025-10-01 21:11:36.378 00:01:00.248 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:12:36.397 00:01:00.210 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:09:36.606 00:05:03.272 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-01 21:09:43.967 00:05:52.702 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-01 21:14:36.398 00:01:00.211 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:13:36.378 00:02:00.251 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-10-01 21:16:23.074 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:16:23.242 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:16:23.200 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:16:23.332 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:16:23.363 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:16:36.398 00:00:00.211 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-10-01 21:13:17.512 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 33 2256 1 2025-10-01 21:12:43.985 00:05:52.624 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-01 21:16:36.378 00:01:00.251 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:13:36.689 00:05:03.174 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-01 21:17:36.399 00:01:00.211 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:18:36.379 00:01:00.251 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:15:36.609 00:05:03.276 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-01 21:19:36.401 00:01:00.210 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:15:43.966 00:05:52.704 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-01 21:21:23.569 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:21:23.430 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:21:23.458 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:21:23.287 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:21:23.607 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:20:36.380 00:02:00.251 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-10-01 21:18:37.515 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-01 21:21:36.400 00:02:00.211 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-10-01 21:18:43.988 00:05:52.623 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-01 21:19:36.691 00:05:03.175 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-01 21:23:36.380 00:01:00.251 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:24:36.401 00:01:00.211 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:21:36.611 00:05:03.275 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-01 21:26:23.675 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:26:23.498 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:26:23.701 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:26:23.646 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:26:23.808 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:21:43.969 00:05:52.704 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-01 21:25:36.380 00:02:00.253 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-10-01 21:23:57.519 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2724 1 2025-10-01 21:26:36.402 00:02:00.211 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-10-01 21:28:36.382 00:01:00.251 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:24:43.990 00:05:52.623 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-01 21:25:36.691 00:05:03.174 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-01 21:29:36.403 00:01:00.210 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:31:23.726 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:31:23.703 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:31:23.689 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:31:23.743 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:31:23.654 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:27:36.612 00:05:03.274 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-01 21:30:36.383 00:02:00.251 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-10-01 21:27:43.971 00:05:52.703 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-01 21:29:17.527 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2908 1 2025-10-01 21:31:36.403 00:02:00.211 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-10-01 21:33:36.383 00:01:00.250 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:34:36.403 00:01:00.211 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:31:36.693 00:05:03.176 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-01 21:30:43.992 00:05:52.622 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-01 21:36:23.828 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:36:23.748 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:36:23.828 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:36:23.590 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:36:23.532 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:35:36.384 00:02:00.251 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-10-01 21:33:36.614 00:05:03.276 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-01 21:36:36.405 00:02:00.211 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-10-01 21:33:43.973 00:05:52.703 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-01 21:34:37.535 00:05:10.095 OSPF 30.0.8.1:0 -> 224.0.0.5:0 45 3208 1 2025-10-01 21:38:36.387 00:01:00.249 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:39:36.410 00:01:00.207 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:41:23.848 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:41:24.009 00:00:00.020 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:41:23.808 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:41:24.048 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:41:23.946 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:36:43.993 00:05:52.626 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-01 21:37:36.695 00:05:03.176 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-01 21:40:36.390 00:02:00.248 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-10-01 21:41:36.411 00:02:00.208 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-10-01 21:39:36.615 00:05:03.277 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-01 21:39:57.550 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2464 1 2025-10-01 21:43:36.391 00:01:00.248 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:39:43.974 00:05:52.706 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-01 21:44:36.412 00:01:00.208 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:46:23.817 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:46:24.033 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:46:23.767 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:46:23.949 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:46:23.946 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:45:36.391 00:02:00.249 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-10-01 21:42:43.994 00:05:52.627 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-01 21:43:36.699 00:05:03.174 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-01 21:46:36.412 00:02:00.209 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-10-01 21:45:17.557 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-01 21:48:36.392 00:01:00.248 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:45:36.620 00:05:03.273 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-01 21:49:36.411 00:01:00.209 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:45:43.975 00:05:52.709 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-01 21:51:23.885 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:51:23.900 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:51:23.933 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:51:24.094 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:51:23.894 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:50:36.393 00:01:00.251 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:52:36.392 00:00:00.249 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-10-01 21:51:36.413 00:01:00.209 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-10-01 21:49:36.701 00:05:03.173 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-01 21:48:43.996 00:05:52.626 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-01 21:53:36.394 00:01:00.248 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:50:37.564 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2740 1 2025-10-01 21:53:36.414 00:02:00.208 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-10-01 21:51:36.624 00:05:03.271 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-01 21:56:24.250 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-01 21:56:23.846 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 21:56:24.117 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-01 21:56:24.066 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-01 21:56:24.159 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-01 21:55:36.393 00:01:00.249 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-10-01 21:51:43.977 00:05:52.709 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-01 21:56:36.414 00:01:00.211 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 Summary: total flows: 161, total bytes: 89274, total packets: 1316, avg bps: 189, avg pps: 0, avg bpp: 67 Time window: 2025-10-01 20:54:43 - 2025-10-01 21:57:36 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0048s User: 0.0010s Wall: 0.0025s flows/second: 65657.1 Runtime: 0.0025s