Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 04:55:06.254 00:04:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 5 355 1 2025-12-01 04:56:06.211 00:04:00.065 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-12-01 04:55:13.666 00:05:52.649 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 05:00:27.549 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.364 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.529 00:00:00.030 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.467 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.505 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 04:57:06.255 00:05:05.578 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 04:57:11.807 00:05:54.529 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 04:58:47.527 00:05:10.022 OSPF 30.0.8.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 04:58:13.687 00:05:52.571 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 05:00:06.255 00:04:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 5 355 1 2025-12-01 05:01:06.212 00:04:00.065 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-12-01 05:05:27.581 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:05:27.565 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:05:27.575 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:05:27.533 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:05:27.603 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:05:06.258 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 05:01:13.668 00:05:52.651 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 05:03:06.256 00:05:05.579 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 05:03:11.814 00:05:54.527 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 05:04:07.548 00:05:10.014 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2464 1 2025-12-01 05:07:06.259 00:02:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 213 1 2025-12-01 05:04:13.689 00:05:52.571 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 05:06:06.213 00:04:00.067 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-12-01 05:10:27.774 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.765 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.731 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.702 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.669 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:10:06.259 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 05:11:06.221 00:01:00.059 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 05:07:13.670 00:05:52.650 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 05:09:06.259 00:05:05.578 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 05:09:27.563 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2936 1 2025-12-01 05:12:06.259 00:02:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 213 1 2025-12-01 05:09:11.815 00:05:54.526 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 05:13:06.221 00:02:00.059 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 05:10:13.691 00:05:52.569 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 05:15:27.912 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:15:27.773 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:15:27.641 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:15:27.652 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:15:27.771 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:15:06.262 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 05:16:06.222 00:01:00.059 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 05:13:13.673 00:05:52.649 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 05:14:47.571 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2644 1 2025-12-01 05:15:06.260 00:05:05.581 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 05:15:11.818 00:05:54.524 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 05:20:28.189 00:00:00.037 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:20:28.152 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:20:27.912 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:20:28.032 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:20:28.074 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:17:06.261 00:03:59.999 TCP 30.156.0.1:179 -> 30.152.0.1:44791 5 355 1 2025-12-01 05:16:13.692 00:05:52.569 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 05:18:06.225 00:04:00.057 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-12-01 05:19:13.672 00:05:52.650 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 05:20:07.580 00:05:10.525 OSPF 30.0.8.1:0 -> 224.0.0.5:0 43 3136 1 2025-12-01 05:21:06.260 00:05:05.580 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 05:25:28.010 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:25:28.022 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:25:28.094 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:25:28.103 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:25:28.013 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:22:06.262 00:04:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 5 355 1 2025-12-01 05:21:11.820 00:05:54.522 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 05:23:06.227 00:04:00.056 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-12-01 05:22:13.693 00:05:52.570 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 05:25:27.587 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2524 1 2025-12-01 05:25:13.674 00:05:52.649 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 05:30:27.933 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:30:28.073 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:30:28.064 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:30:27.917 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:30:28.029 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:27:06.263 00:04:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 5 355 1 2025-12-01 05:27:06.263 00:05:05.581 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 05:28:06.226 00:04:00.058 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-12-01 05:27:11.823 00:05:54.521 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 05:28:13.696 00:05:52.568 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 05:30:47.595 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2544 1 2025-12-01 05:35:28.323 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:35:28.242 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:35:28.235 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:35:28.238 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:35:28.190 00:00:00.043 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:31:13.676 00:05:52.649 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 05:32:06.264 00:04:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 5 355 1 2025-12-01 05:33:06.228 00:04:00.057 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-12-01 05:33:06.264 00:05:05.582 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 05:33:11.824 00:05:54.521 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 05:37:06.266 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 05:34:13.697 00:05:52.568 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 05:36:07.603 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2728 1 2025-12-01 05:40:28.256 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:40:28.062 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:40:28.150 00:00:00.028 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:40:28.184 00:00:00.042 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:40:28.178 00:00:00.030 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:39:06.265 00:02:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 213 1 2025-12-01 05:38:06.228 00:04:00.056 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-12-01 05:37:13.678 00:05:52.649 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 05:42:06.265 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 05:39:06.265 00:05:05.583 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 05:43:06.229 00:01:00.059 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 05:39:11.827 00:05:54.519 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 05:40:13.698 00:05:52.568 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 05:45:28.328 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.454 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.459 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.405 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.395 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:41:27.607 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2808 1 2025-12-01 05:44:06.265 00:02:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 213 1 2025-12-01 05:45:06.229 00:02:00.056 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 05:47:06.266 00:01:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 142 1 2025-12-01 05:43:13.678 00:05:52.650 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 05:48:06.231 00:01:00.055 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 05:45:06.266 00:05:05.585 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 05:45:11.828 00:05:54.518 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 05:50:28.471 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:50:28.690 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:50:28.631 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:50:28.372 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:50:28.659 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:46:47.609 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2728 1 2025-12-01 05:46:13.699 00:05:52.569 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 05:49:06.268 00:04:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 5 355 1 2025-12-01 05:50:06.231 00:04:00.056 TCP 30.152.0.1:44791 -> 30.156.0.1:179 10 615 1 2025-12-01 05:49:13.680 00:05:52.647 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 05:51:06.266 00:05:05.585 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 05:55:28.846 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.721 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.543 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.634 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.676 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 05:51:11.830 00:05:54.518 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 05:52:02.787 00:05:04.835 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2864 1 2025-12-01 05:52:13.700 00:05:52.568 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 05:54:06.267 00:04:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 5 355 1 Summary: total flows: 144, total bytes: 86137, total packets: 1259, avg bps: 182, avg pps: 0, avg bpp: 68 Time window: 2025-12-01 04:55:06 - 2025-12-01 05:58:06 Total flows processed: 144, passed: 144, Blocks skipped: 0, Bytes read: 15040 Sys: 0.0042s User: 0.0008s Wall: 0.0018s flows/second: 78643.2 Runtime: 0.0018s