Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 01:55:01.973 00:05:00.098 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 01:55:02.151 00:05:04.127 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 01:55:09.243 00:05:52.828 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 02:01:04.466 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:01:04.397 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:01:04.343 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:01:04.347 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:01:04.624 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 01:58:01.955 00:05:00.137 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 01:59:29.811 00:05:10.420 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2888 1 2025-11-22 01:59:09.223 00:05:52.909 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 02:00:02.071 00:05:04.227 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 02:01:01.977 00:05:00.095 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 02:01:02.152 00:05:04.127 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 02:01:09.246 00:05:52.827 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 02:06:04.024 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:06:03.899 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:06:04.004 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:06:04.006 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:06:04.033 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:04:01.957 00:05:00.136 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 02:04:49.817 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-22 02:05:09.226 00:05:52.908 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 02:06:02.072 00:05:04.229 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 02:11:04.147 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:11:03.897 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:07:01.979 00:05:00.096 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 02:11:03.925 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:11:04.049 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:11:04.091 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:07:02.153 00:05:04.128 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 02:07:09.246 00:05:52.828 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 02:10:01.958 00:05:00.136 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 02:10:09.824 00:05:10.002 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2644 1 2025-11-22 02:16:04.296 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:16:04.225 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:16:04.262 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:16:04.198 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:16:04.239 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:11:09.227 00:05:52.919 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 02:12:02.073 00:05:04.229 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 02:13:02.154 00:05:04.128 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 02:13:01.980 00:05:00.097 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 02:13:09.247 00:05:52.829 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 02:15:29.826 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2604 1 2025-11-22 02:16:01.960 00:05:00.137 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 02:21:04.750 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:21:04.448 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:21:04.493 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:21:04.635 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:21:04.786 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:18:02.076 00:05:04.228 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 02:17:09.229 00:05:52.908 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 02:19:01.982 00:05:00.096 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 02:19:02.157 00:05:04.127 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 02:19:09.249 00:05:52.829 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 02:20:49.831 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2856 1 2025-11-22 02:22:01.962 00:05:00.136 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 02:26:04.326 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:26:04.470 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:26:04.434 00:00:00.027 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:26:04.542 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:26:04.504 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:23:09.229 00:05:52.910 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 02:24:02.078 00:05:04.227 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 02:25:02.158 00:05:04.127 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 02:25:01.992 00:05:00.087 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 02:25:09.251 00:05:52.829 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 02:26:09.839 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2896 1 2025-11-22 02:31:04.656 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:31:04.572 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:31:04.613 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:31:04.621 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:31:04.511 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:28:01.972 00:05:00.128 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 02:30:02.079 00:05:04.231 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 02:29:09.231 00:05:52.909 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 02:31:01.993 00:05:00.087 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 02:31:02.159 00:05:04.128 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 02:31:29.845 00:05:10.005 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-22 02:31:09.251 00:05:52.830 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 02:36:04.664 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:36:04.535 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:36:04.622 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:36:04.767 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:36:04.607 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:34:01.974 00:05:00.130 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 02:36:02.080 00:05:04.231 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 02:35:09.232 00:05:52.912 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 02:36:49.851 00:05:10.011 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2844 1 2025-11-22 02:41:04.948 00:00:00.033 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:41:04.897 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:37:01.994 00:05:00.089 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 02:41:05.006 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:41:05.018 00:00:00.026 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:41:04.956 00:00:00.127 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:37:02.160 00:05:04.131 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 02:37:09.253 00:05:52.830 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 02:40:01.981 00:05:00.156 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 02:46:04.901 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:42:02.083 00:05:04.228 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 02:46:04.778 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:46:04.817 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:46:04.683 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:46:04.982 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:41:09.239 00:05:52.938 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 02:42:09.860 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-22 02:43:01.998 00:05:00.119 TCP 30.156.0.1:179 -> 30.152.0.1:44791 12 738 1 2025-11-22 02:43:02.163 00:05:04.129 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 02:43:09.261 00:05:52.859 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 02:46:01.978 00:05:00.162 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 02:51:04.932 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:51:04.800 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:51:04.833 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:51:04.833 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:51:04.663 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:47:29.869 00:05:01.093 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2788 1 2025-11-22 02:48:02.118 00:05:04.195 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 02:47:09.242 00:05:52.938 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 02:49:02.200 00:05:04.093 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 02:49:09.265 00:05:52.859 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 02:49:02.001 00:06:00.123 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-22 02:52:01.979 00:05:00.163 TCP 30.152.0.1:44791 -> 30.156.0.1:179 12 738 1 2025-11-22 02:56:05.023 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 02:56:05.035 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 02:56:05.258 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 02:56:05.072 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 02:56:05.194 00:00:00.037 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 02:52:39.875 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2880 1 2025-11-22 02:53:09.243 00:05:52.941 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 02:54:02.126 00:05:04.192 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 Summary: total flows: 131, total bytes: 89615, total packets: 1325, avg bps: 186, avg pps: 0, avg bpp: 67 Time window: 2025-11-22 01:55:01 - 2025-11-22 02:59:06 Total flows processed: 131, passed: 131, Blocks skipped: 0, Bytes read: 13688 Sys: 0.0030s User: 0.0030s Wall: 0.0018s flows/second: 74010.5 Runtime: 0.0018s