Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 15:57:06.458 00:02:00.004 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 15:58:06.440 00:02:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 15:55:13.856 00:05:52.662 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 16:00:40.693 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:00:40.719 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:00:40.797 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:00:40.728 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:00:40.755 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:00:06.458 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 15:57:06.538 00:05:05.510 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 15:57:06.457 00:05:05.610 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:01:06.442 00:01:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 15:58:13.879 00:05:52.581 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 15:58:58.607 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 36 2464 1 2025-12-01 16:02:06.459 00:02:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 16:03:06.443 00:02:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 16:05:40.787 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:05:40.867 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:05:40.823 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:05:40.909 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:05:40.800 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:05:06.460 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:01:13.859 00:05:52.662 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 16:06:06.442 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:03:06.540 00:05:05.539 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 16:03:06.459 00:05:05.640 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:07:06.461 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:04:18.614 00:05:10.003 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2792 1 2025-12-01 16:09:06.461 00:00:00.001 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 16:04:13.880 00:05:52.581 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 16:08:06.442 00:02:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 16:10:40.890 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:10:40.873 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:10:40.732 00:00:00.024 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:10:40.967 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:10:40.995 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:10:06.461 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:11:06.443 00:01:00.040 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:07:13.861 00:05:52.661 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 16:12:06.462 00:01:00.000 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:09:06.461 00:05:05.638 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:09:06.543 00:05:05.537 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 16:09:38.618 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2752 1 2025-12-01 16:14:06.461 00:00:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 16:13:06.444 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:10:13.881 00:05:52.581 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 16:15:06.442 00:00:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 16:15:41.336 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:15:41.073 00:00:00.021 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:15:41.232 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:15:41.314 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:15:41.421 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:15:06.461 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:16:06.443 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:17:06.462 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:13:13.862 00:05:52.661 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 16:18:06.445 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:14:58.624 00:05:10.008 OSPF 30.0.8.1:0 -> 224.0.0.5:0 37 2764 1 2025-12-01 16:15:06.542 00:05:05.540 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 16:15:06.462 00:05:05.640 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:20:06.444 00:00:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 16:20:41.013 00:00:00.020 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:20:41.202 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:20:41.195 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:20:41.080 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:20:41.030 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:19:06.462 00:02:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 16:16:13.882 00:05:52.580 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 16:21:06.444 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:22:06.463 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:23:06.443 00:01:00.039 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:19:13.863 00:05:52.660 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 16:20:18.634 00:05:10.607 OSPF 30.0.8.1:0 -> 224.0.0.5:0 42 3076 1 2025-12-01 16:21:06.543 00:05:05.540 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 16:21:06.463 00:05:05.640 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:25:41.169 00:00:00.021 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:25:41.028 00:00:00.024 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:25:41.285 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:25:41.296 00:00:00.021 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:25:41.174 00:00:00.049 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:24:06.462 00:02:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 16:25:06.445 00:02:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 16:22:13.883 00:05:52.581 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 16:27:06.463 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:28:06.446 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:25:38.638 00:05:10.007 OSPF 30.0.8.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 16:25:13.863 00:05:52.661 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 16:30:41.201 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:30:41.376 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:30:41.241 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:30:41.334 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:30:41.331 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:29:06.464 00:02:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 16:27:06.543 00:05:05.539 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 16:27:06.463 00:05:05.640 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:30:06.448 00:02:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 16:32:06.465 00:01:00.006 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:28:13.884 00:05:52.580 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 16:33:06.451 00:01:00.034 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:30:53.996 00:05:04.655 OSPF 30.0.8.1:0 -> 224.0.0.5:0 39 2748 1 2025-12-01 16:35:41.405 00:00:00.022 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:35:41.335 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:35:41.367 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:35:41.430 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:35:41.564 00:00:00.022 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:31:13.865 00:05:52.660 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 16:34:06.466 00:02:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 16:35:06.447 00:02:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 16:33:06.465 00:05:05.639 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:33:06.544 00:05:05.539 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 16:37:06.466 00:01:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:34:13.887 00:05:52.579 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 16:38:06.447 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:39:06.466 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:36:08.650 00:05:10.813 OSPF 30.0.8.1:0 -> 224.0.0.5:0 40 2808 1 2025-12-01 16:40:41.590 00:00:00.024 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:40:41.608 00:00:00.026 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:40:41.482 00:00:00.021 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:40:41.565 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:40:41.524 00:00:00.021 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:41:06.466 00:00:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 16:40:06.449 00:02:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 6 369 1 2025-12-01 16:37:13.870 00:05:52.661 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 16:42:06.466 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:39:06.465 00:05:05.639 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:39:06.546 00:05:05.539 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 16:43:06.448 00:01:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:44:06.467 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:40:13.889 00:05:52.578 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 16:41:28.664 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 34 2420 1 2025-12-01 16:45:41.708 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:45:41.448 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:45:41.560 00:00:00.023 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:45:41.628 00:00:00.022 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:45:41.605 00:00:00.023 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:46:06.468 00:00:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 2 123 1 2025-12-01 16:45:06.451 00:01:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:47:06.451 00:00:00.037 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 16:47:06.467 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:43:13.870 00:05:52.658 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 16:48:06.450 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:45:06.548 00:05:05.539 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 16:45:06.467 00:05:05.639 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:49:06.468 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:50:41.838 00:00:00.023 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:50:41.762 00:00:00.022 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:50:41.728 00:00:00.024 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:50:41.804 00:00:00.023 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:50:41.776 00:00:00.024 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:46:48.668 00:05:10.004 OSPF 30.0.8.1:0 -> 224.0.0.5:0 43 3276 1 2025-12-01 16:46:13.891 00:05:52.579 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 16:50:06.452 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:52:06.451 00:00:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 2 123 1 2025-12-01 16:51:06.469 00:02:00.002 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 2025-12-01 16:53:06.451 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:49:13.871 00:05:52.658 TCP 30.155.0.1:179 -> 30.156.0.1:37721 12 738 1 2025-12-01 16:54:06.469 00:01:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 4 246 1 2025-12-01 16:51:06.549 00:05:05.539 TCP 30.157.0.1:39897 -> 30.156.0.1:179 12 738 1 2025-12-01 16:51:06.469 00:05:05.640 TCP 30.156.0.1:179 -> 30.157.0.1:39897 12 738 1 2025-12-01 16:55:41.890 00:00:00.025 ICMP 31.102.0.1:0 -> 23.0.198.2:0.0 3 252 1 2025-12-01 16:55:41.880 00:00:00.022 ICMP 31.102.0.1:0 -> 25.0.198.2:0.0 3 252 1 2025-12-01 16:55:41.914 00:00:00.026 ICMP 31.102.0.1:0 -> 26.0.198.2:0.0 3 252 1 2025-12-01 16:55:41.908 00:00:00.025 ICMP 31.102.0.1:0 -> 24.0.198.2:0.0 3 252 1 2025-12-01 16:55:42.109 00:00:00.041 ICMP 31.102.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 16:55:06.451 00:01:00.038 TCP 30.152.0.1:44791 -> 30.156.0.1:179 4 246 1 2025-12-01 16:52:08.672 00:05:10.006 OSPF 30.0.8.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-01 16:52:13.892 00:05:52.578 TCP 30.156.0.1:37721 -> 30.155.0.1:179 12 738 1 2025-12-01 16:56:06.470 00:02:00.003 TCP 30.156.0.1:179 -> 30.152.0.1:44791 6 369 1 Summary: total flows: 168, total bytes: 89263, total packets: 1320, avg bps: 189, avg pps: 0, avg bpp: 67 Time window: 2025-12-01 15:55:13 - 2025-12-01 16:58:06 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0037s User: 0.0009s Wall: 0.0022s flows/second: 76152.9 Runtime: 0.0022s