Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 21:55:02.620 00:05:04.084 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 21:55:09.586 00:05:52.954 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 21:57:01.531 00:05:10.001 OSPF 30.0.8.1:0 -> 224.0.0.5:0 42 2960 1 2025-11-22 22:01:28.098 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:01:28.023 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:01:27.855 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:01:27.890 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:01:27.900 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 21:57:02.434 00:06:00.109 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-22 21:59:09.565 00:05:53.039 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 21:59:02.415 00:06:00.149 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-22 22:00:02.539 00:05:04.185 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 22:01:02.619 00:05:04.086 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 22:01:09.586 00:05:52.958 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 22:06:28.193 00:00:00.040 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:06:28.185 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:06:28.025 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:06:28.178 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:06:27.981 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:02:21.531 00:05:10.016 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2552 1 2025-11-22 22:04:02.438 00:06:00.107 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-22 22:05:09.568 00:05:53.037 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 22:06:02.545 00:05:04.182 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 22:07:02.624 00:05:04.083 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 22:06:02.417 00:06:00.148 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-22 22:11:28.359 00:00:00.026 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:11:28.464 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:11:28.385 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:11:28.574 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:11:28.652 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:07:41.547 00:05:10.002 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2636 1 2025-11-22 22:07:09.587 00:05:52.958 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 22:12:02.545 00:05:04.185 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 22:11:02.438 00:06:00.108 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-22 22:11:09.568 00:05:53.038 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 22:16:28.315 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:16:28.525 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:16:28.059 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:16:28.092 00:00:00.054 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:16:28.358 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:13:02.626 00:05:04.083 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 22:13:01.550 00:05:10.079 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2732 1 2025-11-22 22:13:09.588 00:05:52.958 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 22:13:02.418 00:06:00.148 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-22 22:21:28.463 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:21:28.459 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:21:28.377 00:00:00.020 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:21:28.377 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:21:28.471 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:17:09.579 00:05:53.028 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 22:18:02.546 00:05:04.185 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 22:18:21.557 00:05:10.136 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2856 1 2025-11-22 22:18:02.439 00:06:00.108 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-22 22:19:02.626 00:05:04.084 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 22:19:09.599 00:05:52.949 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 22:20:02.419 00:06:00.148 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-22 22:26:28.585 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:26:28.434 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:26:28.466 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:26:28.470 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:26:28.506 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:23:41.571 00:05:10.186 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2752 1 2025-11-22 22:23:09.579 00:05:53.030 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 22:24:02.547 00:05:04.186 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 22:25:02.628 00:05:04.086 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 22:25:09.600 00:05:52.950 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 22:25:02.441 00:06:00.109 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-22 22:31:28.604 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:31:28.370 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:31:28.659 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:31:28.408 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:31:28.535 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:27:02.421 00:06:00.150 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-22 22:29:01.580 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2808 1 2025-11-22 22:29:09.580 00:05:53.031 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 22:30:02.551 00:05:04.185 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 22:31:02.630 00:05:04.085 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 22:31:09.603 00:05:52.950 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 22:36:28.722 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:36:28.662 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:36:28.695 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:36:28.703 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:36:28.661 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:32:02.443 00:06:00.109 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-22 22:34:21.587 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2540 1 2025-11-22 22:34:02.423 00:06:00.150 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-22 22:35:09.583 00:05:53.030 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 22:36:02.552 00:05:04.185 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 22:37:02.632 00:05:04.085 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 22:41:28.941 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:41:28.800 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:41:28.951 00:00:00.033 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:41:28.726 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:41:28.867 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:37:09.603 00:05:52.951 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 22:39:41.590 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2576 1 2025-11-22 22:39:02.444 00:06:00.110 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-22 22:41:09.584 00:05:53.030 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 22:41:02.424 00:06:00.150 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-22 22:42:02.553 00:05:04.185 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 22:46:29.082 00:00:00.029 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:46:29.029 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:46:29.134 00:00:00.032 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:46:29.068 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:46:29.175 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:43:02.633 00:05:04.085 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 22:43:09.605 00:05:52.950 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 22:45:01.600 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2628 1 2025-11-22 22:46:02.446 00:06:00.109 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-22 22:51:29.259 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:51:29.094 00:00:00.042 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:51:28.955 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:51:29.050 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:51:29.174 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:47:09.584 00:05:53.031 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 22:48:02.555 00:05:04.184 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 22:49:02.635 00:05:04.084 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-22 22:48:02.427 00:06:00.149 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-22 22:49:09.606 00:05:52.950 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-22 22:50:21.609 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2752 1 2025-11-22 22:56:29.065 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-22 22:56:29.139 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-22 22:56:29.113 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-22 22:56:29.171 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-22 22:56:29.067 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-22 22:53:09.585 00:05:53.032 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-22 22:54:02.556 00:05:04.184 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-22 22:53:02.448 00:06:00.110 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 Summary: total flows: 128, total bytes: 89069, total packets: 1316, avg bps: 185, avg pps: 0, avg bpp: 67 Time window: 2025-11-22 21:55:02 - 2025-11-22 22:59:06 Total flows processed: 128, passed: 128, Blocks skipped: 0, Bytes read: 13376 Sys: 0.0045s User: 0.0009s Wall: 0.0019s flows/second: 66084.6 Runtime: 0.0020s