Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 06:54:08.843 00:05:52.700 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-21 06:55:01.562 00:05:04.330 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-21 06:58:01.483 00:02:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 213 1 2025-11-21 06:58:01.433 00:02:00.070 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-11-21 06:56:01.483 00:05:07.382 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-21 07:00:41.054 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:00:40.887 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:00:41.024 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:00:40.836 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:00:40.893 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:01:01.491 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:01:01.434 00:01:00.076 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:03:01.490 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:00:01.483 00:05:04.429 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-21 06:59:58.381 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2564 1 2025-11-21 07:05:01.492 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-11-21 07:03:01.434 00:02:00.078 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-11-21 07:01:01.571 00:05:04.322 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-21 07:00:08.845 00:05:52.707 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-21 07:05:41.105 00:00:00.020 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:05:40.895 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:05:40.920 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:05:40.926 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:05:41.230 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:02:01.491 00:05:07.375 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-21 07:06:01.435 00:01:00.078 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:06:01.492 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:08:01.494 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:05:18.387 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2700 1 2025-11-21 07:08:01.436 00:02:00.080 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-11-21 07:10:01.497 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-11-21 07:06:01.493 00:05:04.422 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-21 07:10:41.367 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:10:41.215 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:10:41.204 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:10:41.256 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:10:41.050 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:06:08.846 00:05:52.710 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-21 07:07:01.573 00:05:04.322 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-21 07:11:01.437 00:01:00.080 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:11:01.497 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:08:01.493 00:05:07.374 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-21 07:13:01.496 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:10:38.392 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2940 1 2025-11-21 07:13:01.436 00:02:00.081 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-11-21 07:15:01.497 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-11-21 07:15:41.417 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:15:41.302 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:15:41.335 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:15:41.420 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:15:41.196 00:00:00.041 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:12:01.496 00:05:04.419 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-21 07:16:01.437 00:01:00.083 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:16:01.496 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:13:01.576 00:05:04.321 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-21 07:12:08.848 00:05:52.713 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-21 07:14:01.496 00:05:07.372 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-21 07:18:01.499 00:01:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-11-21 07:18:01.438 00:02:00.082 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-11-21 07:15:58.402 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 34 2360 1 2025-11-21 07:20:41.484 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:20:41.111 00:00:00.037 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:20:41.381 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:20:41.450 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:20:41.421 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:20:01.459 00:02:00.044 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-11-21 07:21:01.442 00:01:00.082 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:18:01.500 00:05:04.416 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-21 07:18:08.847 00:05:52.716 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-21 07:19:01.581 00:05:04.320 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-21 07:23:01.461 00:01:00.042 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-11-21 07:23:01.441 00:01:00.082 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:20:01.500 00:05:07.368 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-21 07:25:01.441 00:00:00.082 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-11-21 07:21:18.407 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 43 3096 1 2025-11-21 07:25:41.619 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:25:41.491 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:25:41.447 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:25:41.523 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:25:41.304 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:26:01.441 00:01:00.083 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:25:01.461 00:02:00.042 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-11-21 07:24:01.503 00:05:04.414 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-21 07:28:01.465 00:01:00.040 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-11-21 07:28:01.444 00:01:00.081 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:25:01.583 00:05:04.314 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-21 07:24:08.848 00:05:52.717 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-21 07:26:01.504 00:05:07.374 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-21 07:30:41.506 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:30:41.598 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:30:41.669 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:30:41.486 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:30:41.419 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:26:38.409 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-21 07:30:01.461 00:02:00.044 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-11-21 07:30:01.441 00:02:00.084 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-11-21 07:33:01.448 00:01:00.079 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:33:01.505 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:30:01.505 00:05:04.413 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-21 07:31:01.585 00:05:04.315 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-21 07:30:08.849 00:05:52.716 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-21 07:35:41.705 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:35:41.461 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:35:41.595 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:35:41.586 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:35:41.769 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:35:01.505 00:01:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:31:58.416 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2600 1 2025-11-21 07:32:01.506 00:05:07.374 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-21 07:35:01.446 00:02:00.080 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-11-21 07:37:01.506 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-11-21 07:38:01.446 00:01:00.080 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:38:01.506 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:36:01.505 00:05:04.416 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-21 07:40:43.128 00:00:00.030 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:40:43.234 00:00:00.025 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:40:42.775 00:00:00.020 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:40:43.522 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:40:42.775 00:00:00.020 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:40:01.506 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:36:08.859 00:05:52.707 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-21 07:37:01.586 00:05:04.315 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-21 07:37:18.423 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2644 1 2025-11-21 07:40:01.447 00:02:00.080 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-11-21 07:42:01.506 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-11-21 07:38:01.506 00:05:07.374 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-21 07:43:01.506 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:43:01.448 00:01:00.079 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:45:41.925 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:45:41.887 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:45:41.900 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:45:41.931 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:45:41.996 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:45:01.506 00:01:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:42:01.506 00:05:04.415 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-21 07:42:38.429 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2836 1 2025-11-21 07:47:01.507 00:00:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 1 71 1 2025-11-21 07:45:01.448 00:02:00.079 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-11-21 07:43:01.592 00:05:04.310 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-21 07:42:08.860 00:05:52.708 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-21 07:44:01.508 00:05:07.375 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-21 07:48:01.507 00:01:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-11-21 07:48:01.448 00:01:00.080 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:50:42.044 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:50:42.022 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:50:42.006 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:50:42.053 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:50:42.098 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:50:01.510 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-11-21 07:50:01.449 00:02:00.081 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-11-21 07:48:01.507 00:05:04.416 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-21 07:47:58.436 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2828 1 2025-11-21 07:48:08.861 00:05:52.717 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-21 07:49:01.588 00:05:04.316 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-21 07:52:01.468 00:02:00.049 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-11-21 07:53:01.449 00:01:00.089 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:50:01.510 00:05:07.374 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-21 07:55:41.900 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-21 07:55:42.091 00:00:00.033 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-21 07:55:42.258 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 07:55:42.362 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-21 07:55:42.300 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-21 07:55:01.474 00:01:00.044 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-11-21 07:55:01.454 00:01:00.083 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-11-21 07:57:01.455 00:00:00.083 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-11-21 07:53:18.443 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2664 1 2025-11-21 07:54:01.518 00:05:04.406 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 Summary: total flows: 167, total bytes: 87169, total packets: 1278, avg bps: 178, avg pps: 0, avg bpp: 68 Time window: 2025-11-21 06:54:08 - 2025-11-21 07:59:05 Total flows processed: 167, passed: 167, Blocks skipped: 0, Bytes read: 17432 Sys: 0.0026s User: 0.0026s Wall: 0.0033s flows/second: 50853.0 Runtime: 0.0033s