Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 00:55:55.407 00:05:00.703 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-10 01:00:14.499 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:00:14.613 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:00:14.675 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:00:14.571 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:00:14.647 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 00:56:56.170 00:05:03.822 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-10 00:56:56.088 00:05:03.923 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-10 00:57:55.427 00:05:00.663 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-10 00:57:03.341 00:05:52.809 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-10 00:59:03.362 00:05:52.729 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-10 00:59:55.705 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2768 1 2025-11-10 01:05:14.467 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:05:14.502 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:05:14.404 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:05:14.523 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:05:14.701 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:01:55.408 00:05:00.702 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-10 01:02:56.090 00:05:03.925 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-10 01:02:56.171 00:05:03.823 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-10 01:03:55.427 00:05:00.663 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-10 01:03:03.342 00:05:52.808 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-10 01:05:15.711 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2792 1 2025-11-10 01:05:03.363 00:05:52.728 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-10 01:10:14.873 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:10:14.712 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:10:14.748 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:10:14.794 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:10:14.794 00:00:00.030 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:07:55.409 00:05:00.704 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-10 01:08:56.090 00:05:03.929 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-10 01:08:56.170 00:05:03.827 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-10 01:09:55.429 00:05:00.663 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-10 01:09:03.343 00:05:52.809 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-10 01:10:35.719 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-10 01:15:14.767 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:15:14.856 00:00:00.020 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:15:14.736 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:15:14.843 00:00:00.014 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:15:14.843 00:00:00.013 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:11:03.365 00:05:52.727 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-10 01:13:55.411 00:05:00.702 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-10 01:14:56.093 00:05:03.930 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-10 01:14:56.172 00:05:03.830 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-10 01:15:55.432 00:05:00.661 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-10 01:15:03.345 00:05:52.808 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-10 01:15:55.725 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2872 1 2025-11-10 01:20:14.925 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:20:14.926 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:20:14.967 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:20:15.073 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:20:14.893 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:17:03.366 00:05:52.729 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-10 01:19:55.411 00:05:00.704 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-10 01:20:56.172 00:05:03.832 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-10 01:20:56.093 00:05:03.932 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-10 01:25:14.871 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:25:15.050 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:25:15.082 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:25:14.998 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:25:14.756 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:21:15.732 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2888 1 2025-11-10 01:21:03.346 00:05:52.811 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-10 01:21:55.433 00:05:00.665 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-10 01:23:03.367 00:05:52.731 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-10 01:25:55.412 00:05:00.705 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-10 01:30:14.990 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:30:15.301 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:30:15.253 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:30:15.350 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:30:15.356 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:26:35.738 00:05:10.577 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2832 1 2025-11-10 01:26:56.098 00:05:03.928 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-10 01:26:56.177 00:05:03.829 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-10 01:27:03.348 00:05:52.810 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-10 01:27:55.433 00:05:00.666 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-10 01:29:03.368 00:05:52.730 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-10 01:35:15.173 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:35:15.203 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:35:15.324 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:35:15.285 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:35:15.180 00:00:00.050 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:31:55.413 00:05:00.705 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-10 01:31:55.742 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2712 1 2025-11-10 01:32:56.178 00:05:03.830 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-10 01:32:56.098 00:05:03.929 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-10 01:33:03.349 00:05:52.809 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-10 01:33:55.436 00:05:00.664 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-10 01:35:03.372 00:05:52.727 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-10 01:40:15.225 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:40:15.236 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:40:15.412 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:40:15.406 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:40:15.290 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:37:15.749 00:05:10.002 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-10 01:37:55.415 00:05:00.705 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-10 01:38:56.178 00:05:03.833 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-10 01:38:56.099 00:05:03.932 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-10 01:39:55.436 00:05:00.664 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-10 01:39:03.352 00:05:52.808 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-10 01:45:15.341 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:45:15.588 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:45:15.546 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:45:15.617 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:45:15.589 00:00:00.026 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:41:03.373 00:05:52.727 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-10 01:42:35.751 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2768 1 2025-11-10 01:43:55.416 00:05:00.704 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-10 01:44:56.099 00:05:03.936 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-10 01:44:56.181 00:05:03.835 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-10 01:45:55.436 00:05:00.664 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-10 01:45:03.354 00:05:52.806 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-10 01:50:15.695 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:50:15.523 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:50:15.778 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:50:15.738 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:50:15.908 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:47:03.374 00:05:52.727 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-10 01:47:55.758 00:05:10.042 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2664 1 2025-11-10 01:49:55.417 00:05:00.705 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-10 01:50:56.100 00:05:03.936 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-10 01:50:56.180 00:05:03.837 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-10 01:55:15.554 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-10 01:55:15.397 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 01:55:15.521 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-10 01:55:15.525 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-10 01:55:15.472 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-10 01:51:55.437 00:05:00.665 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-10 01:51:03.355 00:05:52.807 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-10 01:53:15.762 00:05:00.981 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2724 1 2025-11-10 01:53:03.377 00:05:52.727 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 Summary: total flows: 131, total bytes: 89220, total packets: 1319, avg bps: 188, avg pps: 0, avg bpp: 67 Time window: 2025-11-10 00:55:55 - 2025-11-10 01:58:56 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0044s User: 0.0011s Wall: 0.0018s flows/second: 71936.9 Runtime: 0.0018s