Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 13:58:06.398 00:01:00.048 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 13:55:13.823 00:05:52.659 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 13:59:06.427 00:01:00.038 TCP 30.156.0.1:179 -> 30.152.0.1:44791 3 194 1 2025-12-01 13:56:28.414 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 3096 1 2025-12-01 14:00:38.338 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:00:38.268 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:00:38.187 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:00:38.232 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:00:38.344 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:01:06.424 00:00:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 13:57:06.423 00:05:05.588 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 14:00:06.405 00:02:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 13:57:11.989 00:05:54.514 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 14:02:06.423 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 13:58:13.844 00:05:52.579 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 14:03:06.406 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:04:06.424 00:01:00.004 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:05:38.454 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:05:38.296 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:05:38.134 00:00:00.044 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:05:38.341 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:05:38.368 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:01:48.419 00:05:10.058 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2400 1 2025-12-01 14:01:13.824 00:05:52.660 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 14:05:06.407 00:02:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 14:03:06.423 00:05:05.588 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 14:06:06.425 00:02:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 14:03:11.990 00:05:54.515 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 14:04:13.846 00:05:52.579 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 14:08:06.407 00:01:00.043 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:09:06.424 00:01:00.007 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:10:38.708 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:10:38.604 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:10:38.508 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:10:38.521 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:10:38.461 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:07:08.427 00:05:10.005 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2464 1 2025-12-01 14:10:06.411 00:02:00.034 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 14:07:13.827 00:05:52.659 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 14:11:06.425 00:02:00.006 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 14:09:06.424 00:05:05.592 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 14:13:06.411 00:01:00.034 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:09:11.997 00:05:54.508 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 14:14:06.426 00:01:00.006 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:10:13.847 00:05:52.578 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 14:15:38.379 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:15:38.489 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:15:38.529 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:15:38.543 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:15:38.385 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:15:06.411 00:01:00.034 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:12:28.432 00:05:00.992 OSPF 30.0.8.1:0 -> 224.0.0.5:0 41 2948 1 2025-12-01 14:17:06.412 00:00:00.034 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 14:16:06.426 00:02:00.007 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 14:13:13.828 00:05:52.659 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 14:18:06.413 00:01:00.033 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:15:11.996 00:05:00.005 TCP 30.157.0.1:39897 -> 30.156.0.1:179 11 686 1 2025-12-01 14:15:06.426 00:05:05.596 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 14:19:06.426 00:01:00.007 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:20:38.626 00:00:00.025 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:20:38.630 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:20:38.506 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:20:38.713 00:00:00.025 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:20:38.631 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:16:13.850 00:05:52.577 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 14:20:06.412 00:01:00.035 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:17:38.436 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2500 1 2025-12-01 14:21:06.429 00:02:00.008 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 14:22:06.416 00:02:00.032 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 14:19:13.831 00:05:52.657 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 14:24:06.427 00:01:00.008 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:21:06.507 00:05:05.508 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 14:21:06.428 00:05:05.607 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 14:25:38.618 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:25:38.667 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:25:38.838 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:25:38.872 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:25:38.664 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:25:06.417 00:01:00.032 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:22:13.852 00:05:52.576 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 14:22:58.448 00:05:10.104 OSPF 30.0.8.1:0 -> 224.0.0.5:0 42 3196 1 2025-12-01 14:26:06.428 00:02:00.009 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 14:27:06.415 00:02:00.032 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 14:25:13.832 00:05:52.658 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 14:29:06.428 00:01:00.008 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:30:38.895 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:30:39.041 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:30:38.997 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:30:39.035 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:30:38.866 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:30:06.417 00:01:00.032 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:27:06.427 00:05:05.602 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 14:27:06.508 00:05:05.502 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 14:31:06.430 00:01:00.007 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:28:18.457 00:05:10.016 OSPF 30.0.8.1:0 -> 224.0.0.5:0 35 2400 1 2025-12-01 14:33:06.431 00:00:00.006 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 14:28:13.852 00:05:52.578 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 14:32:06.417 00:02:00.032 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 14:34:06.430 00:01:00.008 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:35:39.112 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:35:38.872 00:00:00.025 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:35:38.909 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:35:39.008 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:35:39.038 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:35:06.418 00:01:00.032 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:31:13.832 00:05:52.658 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 14:36:06.431 00:01:00.008 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:33:06.432 00:05:05.602 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 14:33:06.512 00:05:05.503 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 14:33:38.474 00:05:10.230 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2608 1 2025-12-01 14:34:13.854 00:05:52.577 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 14:37:06.418 00:02:00.033 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 14:38:06.431 00:02:00.008 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 14:40:39.155 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:40:39.082 00:00:00.023 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:40:39.118 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:40:39.120 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:40:39.158 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:40:06.418 00:01:00.034 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:41:06.432 00:01:00.007 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:37:13.834 00:05:52.659 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 14:38:58.482 00:05:10.009 OSPF 30.0.8.1:0 -> 224.0.0.5:0 38 2728 1 2025-12-01 14:39:06.511 00:05:05.506 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 14:39:06.430 00:05:05.606 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 14:42:06.419 00:02:00.035 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 14:43:06.432 00:02:00.009 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 14:40:13.856 00:05:52.579 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 14:45:39.104 00:00:00.050 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:45:39.479 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:45:39.480 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:45:39.518 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:45:39.515 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:45:06.421 00:01:00.033 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:46:06.434 00:01:00.008 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:47:06.421 00:01:00.033 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:43:13.836 00:05:52.658 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 14:44:18.490 00:05:10.005 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2672 1 2025-12-01 14:49:06.422 00:00:00.032 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 14:45:06.433 00:05:05.605 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 14:45:06.514 00:05:05.506 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 14:48:06.434 00:02:00.008 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 14:50:39.325 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:50:39.447 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:50:39.447 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:50:39.268 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:50:39.472 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:50:06.422 00:01:00.033 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:46:13.857 00:05:52.578 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 14:51:06.434 00:01:00.009 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:52:06.423 00:01:00.033 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 14:49:38.495 00:05:10.005 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2764 1 2025-12-01 14:49:13.837 00:05:52.661 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 14:53:06.435 00:02:00.008 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 14:51:06.515 00:05:05.510 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 14:51:06.435 00:05:05.609 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 14:55:39.696 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 14:55:39.450 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 14:55:39.404 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 14:55:39.574 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 14:55:39.518 00:00:00.020 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 14:54:06.423 00:02:00.035 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 14:56:06.438 00:01:00.006 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 14:52:13.857 00:05:52.581 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 14:57:06.423 00:01:00.035 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 Summary: total flows: 164, total bytes: 89072, total packets: 1315, avg bps: 188, avg pps: 0, avg bpp: 67 Time window: 2025-12-01 13:55:13 - 2025-12-01 14:58:06 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0062s User: 0.0010s Wall: 0.0027s flows/second: 60117.6 Runtime: 0.0027s