Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 18:55:44.952 00:05:00.391 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-10-19 18:55:44.930 00:05:00.432 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-10-19 19:00:00.552 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:00:00.322 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:00:00.473 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:00:00.514 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:00:00.479 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 18:55:52.798 00:05:52.604 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-19 18:57:32.699 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2624 1 2025-10-19 18:58:45.420 00:05:03.588 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-19 18:59:45.340 00:05:03.688 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-19 18:59:52.821 00:05:52.522 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-19 19:05:00.526 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:05:00.612 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:05:00.676 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:05:00.610 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:05:00.606 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:01:44.937 00:05:00.427 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-10-19 19:01:44.956 00:05:00.387 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-10-19 19:01:52.800 00:05:52.603 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-19 19:02:52.703 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2640 1 2025-10-19 19:04:45.424 00:05:03.585 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-19 19:05:45.343 00:05:03.687 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-19 19:10:00.871 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:10:00.901 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:10:00.740 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:10:00.945 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:10:00.938 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:05:52.825 00:05:52.520 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-19 19:07:44.959 00:05:00.386 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-10-19 19:07:44.939 00:05:00.426 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-10-19 19:08:12.706 00:05:10.002 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 3152 1 2025-10-19 19:07:52.803 00:05:52.603 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-19 19:10:45.425 00:05:03.588 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-19 19:15:00.624 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:15:00.450 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:15:00.665 00:00:00.025 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:15:00.764 00:00:00.011 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:15:00.458 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:11:45.345 00:05:03.687 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-19 19:11:52.825 00:05:52.524 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-19 19:13:44.941 00:05:00.428 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-10-19 19:13:32.708 00:05:10.475 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2448 1 2025-10-19 19:13:44.961 00:05:00.387 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-10-19 19:13:52.804 00:05:52.605 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-19 19:20:00.907 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:20:00.929 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:20:00.911 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:20:01.001 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:20:00.844 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:16:45.429 00:05:03.587 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-19 19:17:45.349 00:05:03.687 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-19 19:17:52.825 00:05:52.524 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-19 19:18:52.716 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2736 1 2025-10-19 19:19:44.942 00:05:00.436 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-10-19 19:19:44.963 00:05:00.396 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-10-19 19:19:52.804 00:05:52.614 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-19 19:25:00.948 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:25:00.811 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:25:00.970 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:25:00.973 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:25:00.879 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:22:45.430 00:05:03.593 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-19 19:23:45.349 00:05:03.693 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-19 19:24:12.720 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2728 1 2025-10-19 19:23:52.825 00:05:52.535 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-19 19:25:44.963 00:05:00.397 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-10-19 19:25:44.944 00:05:00.436 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-10-19 19:30:01.021 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:30:00.860 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:30:00.988 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:30:01.091 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:30:01.029 00:00:00.020 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:25:52.807 00:05:52.614 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-19 19:28:45.440 00:05:03.587 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-19 19:29:32.723 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 34 2336 1 2025-10-19 19:29:45.360 00:05:03.687 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-19 19:29:52.829 00:05:52.531 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-19 19:35:01.294 00:00:00.033 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:35:01.038 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:35:01.131 00:00:00.048 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:35:01.232 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:35:01.272 00:00:00.020 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:31:44.967 00:05:00.394 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-10-19 19:31:44.946 00:05:00.434 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-10-19 19:31:52.810 00:05:52.613 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-19 19:34:45.442 00:05:03.591 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-19 19:34:52.737 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 45 3456 1 2025-10-19 19:35:45.361 00:05:03.686 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-19 19:40:01.643 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:40:01.718 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:40:01.799 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:40:01.620 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:40:01.870 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:35:52.832 00:05:52.530 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-19 19:37:44.968 00:05:00.394 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-10-19 19:37:44.949 00:05:00.434 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-10-19 19:37:52.813 00:05:52.610 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-19 19:40:12.741 00:05:10.000 OSPF 30.0.8.1:0 -> 224.0.0.5:0 33 2256 1 2025-10-19 19:40:45.442 00:05:03.586 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-19 19:45:01.430 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:45:01.145 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:45:01.272 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:45:01.274 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:45:01.386 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:41:45.362 00:05:03.686 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-19 19:41:52.834 00:05:52.529 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-19 19:43:44.950 00:05:00.434 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-10-19 19:43:44.970 00:05:00.393 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-10-19 19:43:52.814 00:05:52.609 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-19 19:45:32.742 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2864 1 2025-10-19 19:50:01.592 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:50:01.381 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:50:01.471 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:50:01.408 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:50:01.635 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:46:45.445 00:05:03.587 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-19 19:47:45.364 00:05:03.688 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-19 19:47:52.837 00:05:52.528 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-10-19 19:49:44.950 00:05:00.435 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-10-19 19:49:44.970 00:05:00.395 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-10-19 19:49:52.817 00:05:52.608 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-10-19 19:50:52.750 00:05:00.898 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2580 1 2025-10-19 19:55:01.693 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-10-19 19:55:01.627 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 19:55:01.594 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-10-19 19:55:01.787 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-10-19 19:55:01.694 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-10-19 19:52:45.445 00:05:03.588 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-10-19 19:53:45.364 00:05:03.689 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-10-19 19:53:52.837 00:05:52.528 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 Summary: total flows: 131, total bytes: 89220, total packets: 1319, avg bps: 185, avg pps: 0, avg bpp: 67 Time window: 2025-10-19 18:55:44 - 2025-10-19 19:59:45 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0038s User: 0.0008s Wall: 0.0022s flows/second: 58740.0 Runtime: 0.0022s