Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 10:54:10.397 00:05:52.832 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-24 10:54:07.478 00:05:55.832 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-24 10:55:03.070 00:06:00.180 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-24 10:56:03.090 00:06:00.140 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-24 10:57:14.522 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2524 1 2025-11-24 11:02:12.575 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:02:12.398 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:02:12.409 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:02:12.314 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:02:12.575 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 10:58:10.378 00:05:52.914 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-24 10:59:07.499 00:05:55.732 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-24 11:00:07.480 00:05:55.832 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-24 11:00:10.397 00:05:52.834 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-24 11:02:34.524 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2672 1 2025-11-24 11:02:03.071 00:06:00.180 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-24 11:07:12.449 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.490 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.442 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.346 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.469 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:03:03.091 00:06:00.140 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-24 11:04:10.379 00:05:52.914 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-24 11:05:07.500 00:05:55.733 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-24 11:06:10.399 00:05:52.834 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-24 11:06:07.482 00:05:55.832 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-24 11:07:54.532 00:05:10.013 OSPF 30.0.8.1:0 -> 224.0.0.5:0 42 2932 1 2025-11-24 11:12:12.627 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:12:12.571 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:12:12.673 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:12:12.673 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:12:12.629 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:09:03.072 00:06:00.181 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-24 11:10:03.093 00:06:00.141 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-24 11:10:10.380 00:05:52.914 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-24 11:11:07.502 00:05:55.731 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-24 11:12:10.399 00:05:52.834 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-24 11:12:07.482 00:05:55.831 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-24 11:17:13.382 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:17:13.067 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:17:13.087 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:17:12.963 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:17:12.937 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:13:14.544 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2728 1 2025-11-24 11:16:10.381 00:05:52.916 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-24 11:16:03.075 00:06:00.182 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-24 11:17:07.505 00:05:55.734 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-24 11:17:03.095 00:06:00.144 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-24 11:22:12.965 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.834 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.801 00:00:00.020 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.932 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.841 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:18:34.550 00:05:00.869 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2576 1 2025-11-24 11:18:07.486 00:05:55.834 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-24 11:18:10.402 00:05:52.837 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-24 11:22:10.382 00:05:52.918 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-24 11:27:13.134 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:27:12.953 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:27:12.902 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:27:12.993 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:27:13.133 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:23:44.557 00:05:10.010 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2560 1 2025-11-24 11:23:03.075 00:06:00.185 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-24 11:23:07.508 00:05:55.733 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-24 11:24:07.494 00:05:55.827 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-24 11:24:10.404 00:05:52.838 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-24 11:24:03.097 00:06:00.145 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-24 11:32:13.107 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:32:13.034 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:32:13.063 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:32:13.019 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:32:13.112 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:28:10.383 00:05:52.918 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-24 11:29:04.568 00:05:11.035 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2876 1 2025-11-24 11:29:07.517 00:05:55.723 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-24 11:30:10.405 00:05:52.837 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-24 11:30:07.498 00:05:55.823 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-24 11:30:03.076 00:06:00.185 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-24 11:31:03.097 00:06:00.145 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-24 11:37:13.032 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:37:13.146 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:37:13.149 00:00:00.037 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:37:13.258 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:37:13.187 00:00:00.044 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:34:24.573 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2688 1 2025-11-24 11:34:10.395 00:05:52.909 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-24 11:35:07.528 00:05:55.714 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-24 11:36:07.508 00:05:55.815 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-24 11:36:10.413 00:05:52.829 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-24 11:37:03.079 00:06:00.184 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-24 11:42:13.266 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:42:13.090 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:42:13.383 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:42:13.242 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:42:13.438 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:38:03.100 00:06:00.143 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-24 11:39:44.582 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 42 3016 1 2025-11-24 11:40:10.395 00:05:52.909 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-24 11:41:07.532 00:05:55.712 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-24 11:42:10.417 00:05:52.827 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-24 11:42:07.512 00:05:55.811 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-24 11:47:13.501 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:47:13.424 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:47:13.306 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:47:13.318 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:47:13.511 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:44:03.083 00:06:00.180 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-24 11:45:04.592 00:05:10.017 OSPF 30.0.8.1:0 -> 224.0.0.5:0 33 2388 1 2025-11-24 11:45:03.103 00:06:00.141 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-24 11:46:10.397 00:05:52.920 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-24 11:47:07.536 00:05:55.720 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-11-24 11:52:13.676 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:52:13.499 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:52:13.454 00:00:00.020 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:52:13.648 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:52:13.511 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:48:07.516 00:05:55.823 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-11-24 11:48:10.419 00:05:52.842 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-11-24 11:50:24.610 00:05:10.017 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2768 1 2025-11-24 11:51:03.087 00:06:00.194 TCP 30.152.0.1:44791 -> 30.156.0.1:179 14 861 1 2025-11-24 11:52:10.401 00:05:52.921 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-11-24 11:52:03.107 00:06:00.154 TCP 30.156.0.1:179 -> 30.152.0.1:44791 14 861 1 2025-11-24 11:57:13.657 00:00:00.026 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.488 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.524 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.676 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.614 00:00:00.025 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-11-24 11:53:07.538 00:05:55.724 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 Summary: total flows: 129, total bytes: 89866, total packets: 1329, avg bps: 184, avg pps: 0, avg bpp: 67 Time window: 2025-11-24 10:54:07 - 2025-11-24 11:59:03 Total flows processed: 129, passed: 129, Blocks skipped: 0, Bytes read: 13480 Sys: 0.0063s User: 0.0063s Wall: 0.0064s flows/second: 20210.1 Runtime: 0.0064s