Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 23:58:01.900 00:01:00.078 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-11-21 23:55:02.058 00:05:04.186 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 00:00:01.901 00:00:00.078 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-21 23:56:01.978 00:05:07.229 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 00:01:01.472 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:01:01.508 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:01:01.442 00:00:00.017 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:01:01.430 00:00:00.033 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:01:01.901 00:00:00.077 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:01:01.312 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-21 23:56:59.668 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 42 2936 1 2025-11-22 00:02:01.901 00:00:00.078 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-21 23:58:01.881 00:05:00.119 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 00:03:01.902 00:01:00.078 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-11-22 00:00:01.979 00:05:04.289 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-21 23:59:09.187 00:05:52.859 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 00:05:01.902 00:00:00.084 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:01:02.059 00:05:04.188 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 00:06:01.607 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.902 00:00:00.078 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:06:01.642 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.438 00:00:00.020 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.555 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.463 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:02:01.979 00:05:07.230 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 00:02:19.673 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2852 1 2025-11-22 00:07:01.904 00:00:00.077 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:08:01.904 00:00:00.080 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:04:01.881 00:05:00.124 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 00:09:01.903 00:00:00.081 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:10:01.905 00:00:00.079 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:05:09.188 00:05:52.856 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 00:06:01.979 00:05:04.290 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 00:11:01.781 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.506 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.906 00:00:00.078 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:11:01.625 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.705 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.789 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:07:02.061 00:05:04.189 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 00:07:39.676 00:05:10.994 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-22 00:12:01.905 00:00:00.079 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:08:01.984 00:05:07.226 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 00:13:01.905 00:00:00.079 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:14:01.906 00:00:00.082 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:10:01.885 00:05:00.122 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 00:15:01.905 00:00:00.081 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:16:01.886 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.682 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.906 00:00:00.081 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:16:01.622 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.853 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.891 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:11:09.189 00:05:52.858 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 00:12:01.985 00:05:04.288 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 00:17:01.917 00:00:00.069 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:13:02.065 00:05:04.188 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 00:12:59.675 00:05:10.002 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2700 1 2025-11-22 00:18:01.917 00:00:00.070 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:14:01.987 00:05:07.223 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 00:19:01.919 00:00:00.068 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:20:01.918 00:00:00.068 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:16:01.885 00:05:00.124 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 00:21:01.850 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.919 00:00:00.070 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:21:01.885 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.812 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.989 00:00:00.027 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:21:02.026 00:00:00.017 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:22:01.943 00:00:00.045 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:18:01.986 00:05:04.288 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 00:17:09.189 00:05:52.860 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 00:18:19.677 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2732 1 2025-11-22 00:23:01.944 00:00:00.044 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:19:02.067 00:05:04.187 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 00:24:01.945 00:00:00.045 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:20:01.987 00:05:07.225 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 00:25:01.944 00:00:00.045 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:26:01.945 00:00:00.045 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:22:01.923 00:05:00.087 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 00:26:02.026 00:00:00.019 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:26:02.086 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:26:02.121 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:26:02.077 00:00:00.020 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:26:02.115 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:27:01.945 00:00:00.045 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:23:39.681 00:05:10.018 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2712 1 2025-11-22 00:28:01.947 00:00:00.043 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:23:09.193 00:05:52.858 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 00:24:01.989 00:05:04.288 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 00:29:01.947 00:00:00.043 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:25:02.071 00:05:04.187 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 00:26:01.989 00:05:07.226 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 00:31:01.948 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:30:01.947 00:01:00.044 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-11-22 00:31:02.307 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:31:01.986 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:31:02.044 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:31:02.089 00:00:00.017 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:32:01.952 00:00:00.038 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:28:01.926 00:05:00.085 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 00:33:01.946 00:00:00.044 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:28:59.700 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2792 1 2025-11-22 00:34:01.948 00:00:00.045 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-11-22 00:30:01.991 00:05:04.288 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 00:29:09.192 00:05:52.860 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 00:31:02.071 00:05:04.188 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 00:35:01.948 00:01:00.045 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-11-22 00:32:01.990 00:05:00.019 TCP 30.156.0.1:37721 -> 30.155.0.1:179 11 686 1 2025-11-22 00:36:02.089 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.207 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.131 00:00:00.025 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.063 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.007 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:34:01.928 00:05:00.101 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 00:34:19.709 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2680 1 2025-11-22 00:36:01.992 00:05:00.017 TCP 30.156.0.1:179 -> 30.157.0.1:39897 11 686 1 2025-11-22 00:35:09.196 00:05:52.873 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 00:37:02.089 00:05:04.174 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 00:41:02.351 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:41:02.213 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:37:01.947 00:05:00.064 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 00:41:02.147 00:00:00.034 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:41:02.161 00:00:00.025 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:41:02.359 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:37:09.217 00:05:52.793 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 00:39:39.715 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2520 1 2025-11-22 00:40:01.928 00:05:00.102 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 00:41:09.196 00:05:52.873 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 00:46:02.652 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:41:06.284 00:06:00.001 TCP 30.156.0.1:179 -> 30.157.0.1:39897 13 790 1 2025-11-22 00:46:02.580 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.564 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.602 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.457 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:43:01.948 00:05:00.062 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 00:43:02.090 00:05:04.174 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 00:43:09.217 00:05:52.793 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 00:44:59.722 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2644 1 2025-11-22 00:46:01.928 00:05:00.101 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 00:51:02.746 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.699 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.816 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.821 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.661 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:47:09.199 00:05:52.880 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 00:48:02.010 00:05:04.275 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 00:49:01.949 00:05:00.067 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 00:49:02.090 00:05:04.174 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 00:49:09.218 00:05:52.797 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 00:50:19.727 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2732 1 2025-11-22 00:52:01.929 00:05:00.105 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 00:56:02.466 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 00:56:02.553 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 00:56:02.621 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 00:56:02.634 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 00:56:02.561 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 00:54:02.015 00:05:04.270 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 00:53:09.199 00:05:52.877 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 Summary: total flows: 159, total bytes: 88863, total packets: 1312, avg bps: 184, avg pps: 0, avg bpp: 67 Time window: 2025-11-21 23:55:02 - 2025-11-22 00:59:06 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0039s User: 0.0019s Wall: 0.0024s flows/second: 65088.3 Runtime: 0.0025s